What should you configure for the Security administrator role assignment?

Your company recently implemented Azure Active Directory (Azure AD) Privileged Identity Management (PIM).

While you review the roles in PIM, you discover that all 15 users in the IT department at the company have permanent security administrator rights.

You need to ensure that the IT department users only have access to the Security administrator role when

required.

What should you configure for the Security administrator role assignment?
A . Expire eligible assignments after from the Role settings details
B . Expire active assignments after from the Role settings details
C . Assignment type to Active
D . Assignment type to Eligible

Answer: D

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure