Helpdesk needs password reset without user admin for all properties tenant-wide. Best role design?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Password/Helpdesk admin roles exist for a reason. Scope with AUs. Global Admin is not a helpdesk badge.
Full explanation below image
Full Explanation
Correct Answer — A
Least privilege password reset uses Password Administrator or Helpdesk Administrator, optionally AU-scoped.
Why B is wrong: Excessive privilege.
Why C is wrong: Wrong role for password ops.
Why D is wrong: Exchange admin is mail, not identity password ops.
Exam tip: Helpdesk password reset → Password/Helpdesk Admin (+ AU).