You’ve uncovered valid credentials for another user in the previous step.

Detailed Solution:

Log in using the credential recovered in Q4.

az login -u sumit.siddharth@azuresecops.onmicrosoft.com -p ' < recovered-password > '

Confirm the current signed-in user:

az ad signed-in-user show --output json

Now enumerate the user’s Microsoft Entra ID role memberships through Microsoft Graph.

az rest --method GET \

--url " https://graph.microsoft.com/v1.0/me/memberOf " \

--output json

To display only role names:

az rest --method GET \

--url " https://graph.microsoft.com/v1.0/me/memberOf " \

--query " value[].displayName " \

--output table

The relevant role is:

User Administrator

This role is dangerous because it can manage users and reset passwords for many non-privileged users. That is exactly why the next task asks you to abuse directory-level privileges to compromise another user.

Final Answer:

B. User Administrator

================