Given the list of users in the referenced table, which users can enable Azure AD Privileged Identity Management (PIM)?

User2 (Global Administrator) and User3 (Privileged Role Administrator) are the only roles with the necessary permissions to enable Azure AD PIM. The Global Administrator role has full control over all administrative functions in Azure AD, including PIM. The Privileged Role Administrator role is specifically designed to manage role assignments, including enabling and configuring PIM. User1 (User Administrator) can manage user properties and group memberships but lacks the permissions to manage privileged identity features like PIM.