You are the administrator of the ACME banking group. You are responsible for managing identities and their roles within the organization. You need to delegate the minimum access to the new IT support engineer to reset user passwords in AAD. Which RBAC role should you assign to the support engineer?
Password administrator is correct as this role allows passwords to be reset for non-admin accounts and helpdesk admins. Global administrator will not suffice as this role grants access to all aspects for Azure AD and Microsoft services that are in Azure. User administrator will not suffice as this role allows management of all aspects of users, groups and admin password resets. Service administrator will not suffice as this role provides read access to health information and manage support requests.