A company is implementing a new user management policy within Microsoft 365 to enhance security and streamline access control. The IT administrator needs to assign roles to users based on their job functions while ensuring that sensitive data remains protected. The administrator decides to use Azure Active Directory (Azure AD) to manage user roles and permissions. Given the following user roles: Global Administrator, User Administrator, and Security Administrator, which role should be assigned to a user who needs to manage user accounts and reset passwords without having access to all administrative features?