Privileged Authentication Administrator.
Microsoft recommends you require MFA on the following roles at a minimum, based on identity score recommendations: Requiring multifactor authentication (MFA) on those accounts is an easy way to reduce the risk of those accounts being compromised. Accounts that are assigned administrative rights are targeted by attackers.
