I think is Y,Y,Y. "If an administrator forgets their own password, ...": "Ask another administrator to reset it for you. In this case, the other administrator must be either a Global admin, a User Management admin, or a Password admin. However, if the administrator who forgot their password is a Global admin, another Global administrator must reset it for them." https://learn.microsoft.com/es-es/training/modules/manage-secure-access-microsoft-365/2-manage-user-passwords

User1 can reset the password of User3. Yes, it can, because of User3 is the User Administrator for the tenant not for the AD User2 can update the display name of User1 Yes User1 can reset the password of User2 No

The thing to pay attention to here is that a Password Administrator cannot change password of a user administrator - that's why its N, Y, N for me.

Correct answer: Y,Y,Y If we read this document https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords, we can see how the password manager can change even that of the global administrator

Correct

Link provided by JensV: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords "For example, a Password Administrator can reset the password for Directory Readers, Guest Inviter, Password Administrator, and users with no administrator role. If a user is assigned any other role, the Password Administrator cannot reset their password."

Agree with Be41223

NO, YES, NO All explanation is here "Password admin - Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators" https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#commonly-used-microsoft-365-admin-center-roles

I personally chose the answers: YYY!!

there is a problem here with user 1 you cant assign role for two AUs - tried it right now and it did not work

NYN User1 can reset password for User3 -> NO, password admin cannot reset passwords for User Admin. Check check https://learn.microsoft.com/en-us/azure/active-directory/roles/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords User2 can Update display name of User 1 -> YES, he is User Admin on AU1 and User 1 is member of AU1, A useradmin can update Most user properties including admin. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator User1 can reset password for User2 -> NO, password admin cannot reset passwords for User Admin. Check check https://learn.microsoft.com/en-us/azure/active-directory/roles/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords

provided answer is correct

I think this one is correct as an Admin cannot reset another Admins password