Microsoft
MS-102 · Question #99
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need to ensure that…
The correct answer is A. Security Reader. https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity- protection#permissions
Submitted by layla.eg· Apr 18, 2026Implement and manage Microsoft Entra identity and access
Question
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege. To which role should you add User1?
Options
- ASecurity Reader
- BGlobal Administrator
- COwner
- DUser Administrator
How the community answered
(19 responses)- A89% (17)
- B5% (1)
- D5% (1)
Explanation
https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity- protection#permissions
Topics
#Azure AD Identity Protection#Role-Based Access Control (RBAC)#Least Privilege#Security Reader role
Community Discussion
No community discussion yet for this question.