nerdexam
Microsoft

70-339 · Question #56

You are the SharePoint administrator for Contoso, Ltd. You deploy a new team site for the Marketing department to the company's SharePoint environment. The manager for the Marketing department must…

The correct answer is C. Site administrator. The Marketing manager needs to add and manage groups within a specific site, which requires the Site administrator permission level scoped to that site.

Plan security

Question

You are the SharePoint administrator for Contoso, Ltd. You deploy a new team site for the Marketing department to the company's SharePoint environment. The manager for the Marketing department must be able to add and manage groups in the new site. You need to grant the correct permissions to the manager while minimizing administrative impact. Which permission level should you grant to the manager?

Options

  • ADesigner
  • BApprover
  • CSite administrator
  • DContributor
  • ESite Collection administrator

How the community answered

(51 responses)
  • A
    4% (2)
  • C
    94% (48)
  • E
    2% (1)

Why each option

The Marketing manager needs to add and manage groups within a specific site, which requires the Site administrator permission level scoped to that site.

ADesigner

Designer permission allows editing pages and applying style sheets but does not grant the ability to create or manage security groups.

BApprover

Approver permission is limited to approving and rejecting items in workflows and does not include group management capabilities.

CSite administratorCorrect

A Site administrator (site owner) in SharePoint has full control over a single site, including the ability to create, modify, and delete permission groups. This scope is limited to the specific team site, which minimizes administrative impact compared to a Site Collection administrator who would have elevated access across all sites in the collection. Granting Site administrator permission satisfies the requirement without over-provisioning rights.

DContributor

Contributor permission only allows adding and editing list items and documents, not managing site groups or permissions.

ESite Collection administrator

Site Collection administrator grants unrestricted access across every site in the entire site collection, which violates the principle of minimizing administrative impact.

Concept tested: SharePoint site permission levels for group management

Source: https://learn.microsoft.com/en-us/sharepoint/sites/user-permissions-and-permission-levels

Topics

#permission levels#site administrator#SharePoint groups#least privilege

Community Discussion

No community discussion yet for this question.

Full 70-339 Practice