You have a Microsoft Entra tenant that contains two users named User! and User2.

A recent audit reveals that User1 has a permanent assignment to the User Administrator role, even though the user account belongs to a former contractor

The security team at your company has the following requirements:

• Ensure that all privileged role assignments are periodically validated.

• Use Privileged Identity Management (PIM) to automate and enforce the validation process

You need to ensure that User2 can meet the security requirements. The solution must follow the principle of least privilege. Which role should you assign to User2, and what should User2 use? To answer, select the appropriate options in the answer area.