You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM).
You need to identify users that are eligible for the Cloud Application Administrator role.
Which blade in the Privileged Identity Management settings should you use?
To identify users eligible for the Cloud Application Administrator role in Azure AD Privileged Identity Management, you should use the Azure AD roles blade. This section allows you to manage Azure AD roles, including viewing and managing assignments and eligibilities of users for different roles.
A. Role does not fit B. Blade does not exist C. Makes sense only if an access review would exist D: Easiest way: Azure AD roles -> Assignments Any other suggestions?
Correct! Now as Microsoft Entra Roles
D, except the TAB is just called 'roles' now. It shows all the roles and the number of assigned/eligible, and you can click on them for more details.
B. Makes sense to me but the answer choice is confusing. Taken from the below Microsoft page "Browse to Identity governance > Privileged Identity Management > Groups." https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/groups-assign-member-owner
no dude, Browse to Identity governance > Privileged Identity Management > Microsoft Entra roles
The Azure AD roles blade in the Privileged Identity Management settings allows you to manage Azure AD roles, including assigning roles to users and groups, and reviewing user and group eligibility for roles
To identify users eligible for the Cloud Application Administrator role using Azure AD Privileged Identity Management (PIM), you should use the "Azure AD roles" blade in the Privileged Identity Management settings (option D). Here's how you can do it: Go to the Azure portal (https://portal.azure.com). In the left-hand navigation pane, navigate to "Azure Active Directory." Under the "Security" section, select "Privileged Identity Management." On the Privileged Identity Management dashboard, select "Azure AD roles." In the list of roles, locate and select the "Cloud Application Administrator" role. In the "Eligible" tab, you can view the list of users who are eligible for the Cloud Application Administrator role.
D. Azure AD roles
Agree with Nils241