MS-102 · Question #486
You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. In the tenant, you create a user named User1. You need to ensure that…
The correct answer is B. Records Management. The Records Management role group grants the permissions necessary to create, manage, and publish retention labels and retention policies-precisely what is needed here. It follows the principle of least privilege because it only provides records-related capabilities. Compliance…
Question
You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. In the tenant, you create a user named User1. You need to ensure that User1 can publish retention labels from the Microsoft 365 compliance center. The solution must use the principle of least privilege. To which role group should you add User1?
Options
- ASecurity Administrator
- BRecords Management
- CCompliance Administrator
- DeDiscovery Manager
How the community answered
(25 responses)- A4% (1)
- B84% (21)
- C8% (2)
- D4% (1)
Explanation
The Records Management role group grants the permissions necessary to create, manage, and publish retention labels and retention policies-precisely what is needed here. It follows the principle of least privilege because it only provides records-related capabilities. Compliance Administrator is broader and grants more permissions than necessary. Security Administrator focuses on security features, not records or retention. eDiscovery Manager is scoped to search and eDiscovery operations, not label publishing. Records Management is the most targeted, least-privileged choice for this task.
Topics
Community Discussion
No community discussion yet for this question.