Assign User Administrator Role in Azure AD

A

Assign a role to a user -

1. Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.

2. Select Azure Active Directory, select Users, and then select a specific user from the list.

3. For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.

4. Press Select to save.

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

To assign the User administrator administrative role to AdminUser1 in Azure Active Directory, you should perform the following steps:

1. Sign in to the Azure portal using an account that has the Global administrator or User administrator role.
2. In the left-hand menu, click on the Azure Active Directory icon to open the Azure AD blade.
3. Click on the Users option from the Azure AD blade to open the Users blade.
4. Find and select the AdminUser1 account from the list of user accounts displayed in the Users blade.
5. In the AdminUser1 account properties, click on the Directory role option from the left-hand menu.
6. In the Directory role blade, click on the Add role assignment button.
7. In the Add role assignment blade, select the User administrator role from the Role dropdown list.
8. In the Select field, search and select the AdminUser1 account.
9. Click on the Add button to assign the User administrator role to AdminUser1.

Explanation:

A. From the Directory role blade, modify the directory role: This is the correct option for assigning the User administrator administrative role to AdminUser1 in Azure AD. The Directory role blade allows you to assign roles to users, groups, or applications, which grant them permissions to access Azure resources and services. By modifying the directory role and adding the User administrator role to AdminUser1, you are granting the user full access to manage user accounts and groups in Azure AD.

B. From the Groups blade, invite the user account to a new group: This is not the correct option for assigning the User administrator administrative role to AdminUser1. The Groups blade in Azure AD allows you to create and manage groups of users, but it does not provide a way to assign administrative roles to individual users.

C. From the Licenses blade, assign a new license: This is not the correct option for assigning the User administrator administrative role to AdminUser1. The Licenses blade in Azure AD allows you to assign licenses to users, which grant them access to specific features and services in Azure. However, it does not provide a way to assign administrative roles to users.