A newly created Azure subscription needs a specific user to be able to configure Azure AD Privileged Identity Management (PIM). Which role should you assign to that user?

To configure Azure AD Privileged Identity Management (PIM), a user requires the Global administrator role. This role provides ultimate control over all administrative functions in Azure AD, including the setup and management of PIM. The Security administrator role can manage security-related features but lacks the broad permissions needed to configure PIM at a foundational level. The Password administrator role is limited to managing user passwords and related settings. The Compliance administrator role focuses on compliance features and reporting, not the configuration of identity management systems like PIM.