Least-privilege Entra role for identity tasks
This sheet compares Minimum role, Over-broad pick to avoid.
| Criterion | Minimum role | Over-broad pick to avoid |
|---|---|---|
| Configure tenant SSPR on the Password reset blade | Authentication Policy Administrator | Global Administrator |
The verdict, the full comparison, 4 rules and 3 traps are part of MS-102 access. Unlock MS-102.