Explanation:

As per the Microsoft Identity and Access Administrator (SC-300) official study guide, and confirmed by Microsoft Learn documentation on "Restore a deleted user in Azure Active Directory", when a user account is deleted from Azure Active Directory (Azure AD), it is not permanently removed immediately. Instead, the deleted user object is retained in a "soft-deleted" state for 30 days. During this retention period, administrators can restore the user account, including its associated group memberships and licenses. After 30 days, the user object is permanently deleted and cannot be recovered.
From the Microsoft documentation:
"When a user is deleted, the account is retained in a deleted state for up to 30 days. You can restore the user within this period using the Azure portal, PowerShell, or Microsoft Graph." Regarding the minimum role required, the same documentation and SC-300 guide state that the User Administrator role is the least privileged built-in Azure AD role that can manage users - including restoring deleted accounts. Higher roles, such as Global Administrator, also have this capability, but the principle of least privilege applies.
"The User Administrator role can create, update, delete, and restore user accounts and reset passwords for non- administrators." Therefore, the correct configuration is:
* Number of days: 30
* Role: User Administrator