You have a Microsoft 365 subscription that uses Microsoft Teams and contains a user named User1. You need to ensure that User1 can investigate call-quality issues and identify the following types of…

Teams Device Administrator manages Teams-certified devices and does not have access to call quality or per-user call analytics data.

The Teams Communication Support Engineer role grants access to Call Analytics, which includes caller and recipient names, device names, IP addresses, and meeting participant details. This role is specifically scoped for support engineers investigating call quality issues and follows least privilege by not granting broader administrative capabilities over Teams configuration.

Teams Administrator has full Teams administration access, which exceeds the least-privilege requirement since it includes policy management, configuration, and reporting beyond call analytics.

Teams Communication Admin can manage voice features and call policies but is a higher-privilege role than needed solely for investigating call quality; it exceeds least privilege for this task.