You have a Microsoft 365 subscription.

 To use the Global Administrator role, admin1@contoso.com must provide: Azure Multi-Factor Authentication (MFA)

The role settings indicate that "Require Azure Multi-Factor Authentication" is set to "Yes" for active assignments. Therefore, admin1@contoso.com must provide Azure MFA to use the Global Administrator role.

 To make a new user eligible for the Global Administrator role, a PIM administrator must configure: an assignment that expires after 15 day(s)

The settings show that eligible assignments expire after 15 days. Therefore, to make a new user eligible, a PIM administrator must configure an assignment with this expiration period.