Understanding Azure Active Directory (AAD) Roles

What AAD role can manage support tickets, monitor service health, and change password for users, Helpdesk admins, and other users of the same role?

1) Global Administrator
2) User Administrator
3) Helpdesk Administrator
4) Security Administrator

Final answer:

The User Administrator role in Azure Active Directory is designed to handle support tickets, monitor service health, and reset passwords for users, including those in Helpdesk Admin roles and others of the same User Administrator role.

The Azure Active Directory (AAD) role that can manage support tickets, monitor service health, and change passwords for users, including Helpdesk admins and users of the same role, is the User Administrator role. While the Global Administrator has these abilities as well, the User Administrator role is specifically crafted to manage user and group administration, including password resets, without having access to all settings in the Azure AD organization as a Global Administrator would.

The Helpdesk Administrator (also known as the Helpdesk role or Password Administrator) has more limited permissions and can only reset passwords and manage service requests. The Security Administrator role is focused on security policies and does not have the scope to manage service health or support tickets to the extent that a User Administrator can.