"Guest Users limited permission" setting description is wrong or don't work as expected in AAD Admin Center
In Azure AD Admin Center, under users and Groups/user settings there is an option to set Guest Users Permissions are limited to YES
The description says: Yes means that guests do not have permission for certain directory tasks, such as enumerate users, groups or other directory resources, and cannot be assigned to administrative roles in your directory.
But in fact, you can grant administrative roles to guess if the setting is yes or no. Description should be changed, or you should remove the option to assign administrative role when set to yes