Your company has a Microsoft 365 subscription.
A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD).
Admin1 successfully joins computers to Azure AD.
Several days later, Admin1 receives the following error message: “This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003).”
You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.
A . Assign the Global administrator role to Admin1.
B . Modify the Device settings in Azure A
D . Assign the Cloud device administrator role to Admin1.
E . Modify the User settings in Azure A
Answer: B
Explanation:
References: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal