The correct answer is User Access Administrator.

User Access Administrator allows the engineer to create and manage role assignments at the subscription and resource scopes so they can grant or revoke access without being given broad resource management permissions. This supports the principle of least privilege and fits subscription governance because the engineer can control who has access while not being able to change the actual resources.

Owner is incorrect because that role grants full control of resources and access and it is far more permissive than needed for managing other engineers access.

Privileged Role Administrator is incorrect because it is an Azure Active Directory privileged role for managing directory elevated roles and it does not provide the scoped ability to assign subscription level RBAC roles for resource access.

Contributor is incorrect because it allows managing resources but it cannot manage role assignments so the engineer could not use it to control other engineers access.

Full AWS Practitioner Certification Question