Exam SC-300 topic 2 question 101 discussion

To create access reviews for Microsoft Entra roles, you must be assigned at least the Privileged Role Administrator role. For access package it should be Identity governance administrator. For security groups, applications it should be Identity governance administrator. To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources.

If you look in https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#privileged-role-administrator The Privileged Role Administrator has hanage access reviews for Microsoft Entra role assignments. I don't see this with the Identity Governance Administrator (more groups etc). My choice is D.

The correct answer is A. Identity Governance Administrator Here's why: Identity Governance Administrator: This role provides the necessary permissions to manage identity governance tasks, including creating and managing access reviews for Microsoft Entra roles. User Access Administrator: This role provides permissions to manage user access within the organization, but it may not include the specific permissions to create access reviews for Entra roles. User Administrator: This role is primarily for managing user accounts and basic attributes, not for managing identity governance. Privileged Role Administrator: This role is for managing privileged roles within the organization, which is a broader scope than just creating access reviews

User Access Administrator role primarily focuses on managing user access