
Explanation:
To use the Global Administrator role,
[email protected] must provide: Azure Multi-Factor Authentication (MFA)The role settings indicate that "Require Azure Multi-Factor Authentication" is set to
"Yes" for active assignments. Therefore,
[email protected] must provide Azure MFA to use the Global Administrator role.
To make a new user eligible for the Global Administrator role, a PIM administrator must configure: an assignment that expires after 15 day(s)The settings show that eligible assignments expire after 15 days.
Therefore, to make a new user eligible, a PIM administrator must configure an assignment with this expiration period.