You have a Microsoft 365 subscription that uses Microsoft Teams and contains users with the following roles: Admin1 (Global Administrator), Admin2 (Teams Administrator). You have a team named…

User1 is a team owner but does not have an administrative role that grants access to the Microsoft 365 Audit log search functionality.

Admin1 alone is not the correct answer because Admin2 as a Teams Administrator also has the necessary audit log permissions.

Admin2 alone is not the correct answer because Admin1 as a Global Administrator also has audit log access.

Searching the Microsoft 365 Audit log requires membership in the Audit Logs or View-Only Audit Logs role in Exchange Online, which is granted to Global Administrators (Admin1) and Teams Administrators (Admin2) by default. Regular team members like User1 do not have access to audit logs, so only Admin1 and Admin2 can perform this monitoring.

User1 does not hold an admin role granting audit log access, so including User1 in the list of authorized monitors is incorrect.