You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1. You plan to use Microsoft Entra ID Protection. You need to…

The correct answer is A. Security Reader. Global Administrator (Most privilege, least preferable) Security Administrator Security Reader (Least privilege, most preferable) Compliance Administrator Reports Reader Service Administrator. * User Administrator Note: The risky sign-ins reports are available to users in the…

Submitted by asante_acc· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1. You plan to use Microsoft Entra ID Protection. You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege. To which role should you add User1?

Options

ASecurity Reader
BReports Reader
CService Administrator
DUser Administrator

How the community answered

(41 responses)

A
76% (31)
B
15% (6)
C
2% (1)
D
7% (3)

Explanation

Global Administrator (Most privilege, least preferable) * Security Administrator * Security Reader (Least privilege, most preferable) * Compliance Administrator * Reports Reader * Service Administrator. * User Administrator Note: The risky sign-ins reports are available to users in the following roles: Security Administrator Global Administrator Of the three roles listed above, the Security Reader role has the least privilege. https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-risky-sign-in

Topics

#Entra ID Protection#Security Reader#RBAC#Least privilege

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice