nerdexam
Microsoft

MS-102 · Question #570

You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1. You plan to use Microsoft Entra ID Protection. You need to…

The correct answer is C. Security Administrator. To review users flagged for risk in Microsoft Entra ID Protection, the least-privileged role that grants access is Security Administrator. This role allows viewing risky users and risk detections without requiring the elevated permissions of Global Administrator.

Submitted by suresh_in· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1. You plan to use Microsoft Entra ID Protection. You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege. To which role should you add User1?

Options

  • ACompliance Administrator
  • BUser Administrator
  • CSecurity Administrator
  • DGlobal Administrator

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    79% (26)
  • D
    12% (4)

Explanation

To review users flagged for risk in Microsoft Entra ID Protection, the least-privileged role that grants access is Security Administrator. This role allows viewing risky users and risk detections without requiring the elevated permissions of Global Administrator.

Topics

#Entra ID Protection#Security Administrator#Least privilege#Risk detection

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice