Assigning Least Privilege for Entra Permissions Management License Purchase
You have an Azure subscription named Sub1 that contains a user named User1. You need to ensure that User1 can purchase a Microsoft Entra Permissions Management license for Sub1. The solution must follow the principle of least privilege. Which role should you assign to User1?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests the distinction between administrative management roles and billing/transactional roles in Microsoft Entra ID, specifically highlighting that license purchases require financial permissions.
Determines the specific Azure AD role required to purchase Microsoft Entra Permissions Management licenses while adhering to least privilege principles. Establishes that Billing Administrator is the correct role for transactional access.
Candidates often select Global Administrator (A) assuming it has all permissions, or Permissions Management Administrator (C) assuming it covers licensing. This ignores the explicit requirement for purchasing capabilities which are tied to billing functions.
Community Discussion (14 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The question requires a solution that follows the principle of least privilege while allowing User1 to purchase a license. In Microsoft Entra ID (Azure AD), the act of purchasing a subscription or license is a financial transaction managed by the Billing Administrator role. According to official Microsoft documentation, the Billing Administrator role includes permissions to make purchases, manage subscriptions, and monitor service health. Therefore, assigning this role provides the necessary capability without granting broader administrative privileges like those held by a Global Administrator.Why the Other Options Are Wrong
Global Administrator (A) grants full access to all administrative features in Microsoft Entra ID but violates the principle of least privilege as it is far more powerful than needed for a simple purchase. Permissions Management Administrator (C) allows managing the settings and policies within the Permissions Management product itself but does not inherently grant permission to purchase the license from the store or billing portal; one must be able to buy it before configuring it. User Access Administrator (D) manages role assignments but does not have permissions to perform financial transactions or purchase services.Community Comment Notes
Community consensus heavily favors Billing Administrator (B), with multiple users citing official Microsoft docs confirming that "To activate a trial or purchase a license..." requires specific billing permissions. One user correctly noted that "Billing Administrator can: Makes purchases, manages subscriptions..." Another user pointed out that Global Admins can do it, but emphasized that the question asks for least privilege, making Billing Admin the superior choice. A minority suggested Global Admin, arguing that only they can purchase, but this contradicts the documented capabilities of the Billing Administrator role regarding subscription management.Official Reference
Exam Strategy
Always look for keywords like 'purchase', 'subscribe', or 'billing' when selecting roles. If the task involves money or subscription activation, think Billing Administrator first, then evaluate if higher privileges are strictly necessary. Remember that 'Least Privilege' is a key constraint in SC-300 questions.
Frequently Asked Questions
Why isn't Permissions Management Administrator sufficient?
This role manages the tool's configuration but does not grant permission to purchase the license from the Microsoft Store or billing portal.
Can a Global Administrator purchase the license?
Yes, but it violates the principle of least privilege. The exam requires the minimal role necessary, which is Billing Administrator.
Practice All SC-300 Questions
Access 80 questions with complete answers and detailed explanations.
View Full SC-300 Practice Test →