nerdexam
Microsoft

70-339 · Question #78

You are the SharePoint administrator for a company. You plan to deploy the SharePoint sites that will be accessible from the company portal. You create the following sites: A user named User1 will…

The correct answer is D. Add the designated divisional user account for each divisional site and grant each user the. SharePoint site management requires delegating site-specific control to divisional leads while minimizing additional administrative configuration.

Plan security

Question

You are the SharePoint administrator for a company. You plan to deploy the SharePoint sites that will be accessible from the company portal. You create the following sites:

A user named User1 will manage the sites. You must prevent all users except for User1 from creating sites and subsites. User1 must be able to delegate management of List permissions to other users. You designate a user in each division as a lead for that division's site. You need to allow the designated lead in a division to manage their division's site while minimizing administrative effort. What should you do?

Exhibit

70-339 question #78 exhibit

Options

  • AFor each site, addthe designated divisional user account to the Team owners group for that
  • BAdd all divisional user accounts to the portal site's Team Owners group.
  • CCreate a new SharePoint group on the Portal site namedSP Division Managers.
  • DAdd the designated divisional user account for each divisional site and grant each user the
  • EAdd all the designated divisional useraccount to the portal site and grant each user the Design

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    2% (1)
  • D
    83% (39)
  • E
    9% (4)

Why each option

SharePoint site management requires delegating site-specific control to divisional leads while minimizing additional administrative configuration.

AFor each site, addthe designated divisional user account to the Team owners group for that

Adding users to the Team Owners group at the portal site would grant access across all portal content rather than restricting each lead to their own divisional site.

BAdd all divisional user accounts to the portal site's Team Owners group.

Adding all divisional accounts to the portal site's Team Owners group gives every lead ownership rights over the entire portal, far exceeding the intended scope of access.

CCreate a new SharePoint group on the Portal site namedSP Division Managers.

Creating a new custom SharePoint group requires additional configuration and ongoing group management, which increases administrative effort rather than minimizing it.

DAdd the designated divisional user account for each divisional site and grant each user theCorrect

Adding the designated divisional user account directly to each divisional site and granting the appropriate permission level (such as Full Control) scopes each lead's management rights to only their own site, leverages built-in SharePoint permission inheritance, and avoids creating extra groups or modifying the portal-level permissions structure.

EAdd all the designated divisional useraccount to the portal site and grant each user the Design

Granting the Design permission at the portal site level gives all leads access to all divisional sites simultaneously and does not restrict each lead to managing only their own division.

Concept tested: SharePoint site-level permission delegation minimizing admin effort

Source: https://learn.microsoft.com/en-us/sharepoint/understanding-permission-levels

Topics

#SharePoint groups#site permissions#delegation#Contribute rights

Community Discussion

No community discussion yet for this question.

Full 70-339 Practice