SC-300 Practice Question 3495

Exam: SC-300
Domain: Plan and automate identity governance
Difficulty: medium
You need to assign an administrator to manage Access Reviews tenant-wide without granting full Global Administrator rights. Which role follows least privilege?

Answer Options

A
Identity Governance Administrator
B
Global Administrator
C
Helpdesk Administrator
D
Billing Reader

Correct Answer

A: Identity Governance Administrator

Explanation

The Identity Governance Administrator role grants full permissions across Entitlement Management, Access Reviews, Lifecycle Workflows, and Privileged Identity Management.