Explanation
Assigning User1 the Authentication Administrator role does not meet the goal of allowing User1 to review Conditional Access policies. According to the article "Azure AD built-in roles" 1, the Authentication Administrator role can only view, set and reset authentication method information for any non-admin user. To review Conditional Access policies, User1 needs to have either the Conditional Access Administrator role or the Security Administrator role 1. The Conditional Access Administrator role can manage all aspects of Conditional Access policies, while the Security Administrator role can manage security-related features, including Conditional Access