Microsoft Exam 98-369 Topic 5 Question 1 Discussion

You recently set up Microsoft Intune for your company.

You need to assign a user a tenant role so that the user can reset certain password. You need to achieve this goal without giving the user the ability to change global administrator passwords.

Which two admin roles fulfill this requirement? (Choose two.)