Your organization is using Privileged Identity Management for role assignments. Within PIM - Which two roles have access to allow a permanent eligible assignment?

Answer options:

A.Security administrator
B.User administrator
C.Global administrator
D.Privileged role administrator
E.Application Administrator

Correct Answers: C and D 
Only Global admins and Privileged role admins can assign permanent eligible assignments. See exhibit: 

Option A is incorrect. Security administrator does not have permission to allow a permanent eligible assignment.
Option B is incorrect. User administrator does not have permission to allow a permanent eligible assignment.
Option E is incorrect. Application administrator does not have permission to allow a permanent eligible assignment.
Reference: 
To know more about privileged identity management, please refer to the link below: 

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings?tabs=new