nerdexam
Microsoft

MS-700 · Question #67

You have a Microsoft Office 365 subscription that contains a user named User1. You need to ensure that User1 can view Analytics & reports in the Microsoft Teams admin center. The solution must use…

The correct answer is C. Global reader. To grant User1 view-only access to Analytics & reports in the Microsoft Teams admin center with the principle of least privilege, the Global reader role is the most appropriate assignment.

Configure and manage a Teams environment

Question

You have a Microsoft Office 365 subscription that contains a user named User1. You need to ensure that User1 can view Analytics & reports in the Microsoft Teams admin center. The solution must use the principle of least privilege. Which role should you assign to User1?

Options

  • AGroups administrator
  • BSkype for Business administrator
  • CGlobal reader
  • DGlobal administrator

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    89% (31)
  • D
    3% (1)

Why each option

To grant User1 view-only access to Analytics & reports in the Microsoft Teams admin center with the principle of least privilege, the Global reader role is the most appropriate assignment.

AGroups administrator

The Groups administrator role primarily manages Microsoft 365 Groups and does not inherently provide access to Teams analytics and reports.

BSkype for Business administrator

The Skype for Business administrator role is for managing Skype for Business, which is a different service than Microsoft Teams.

CGlobal readerCorrect

The Global reader role provides view-only access to all administrative features across Microsoft 365 admin centers, including analytics and reports in the Microsoft Teams admin center. This satisfies the requirement for viewing capabilities without providing unnecessary modification permissions, aligning with the principle of least privilege.

DGlobal administrator

The Global administrator role provides full control over all Microsoft 365 services, which violates the principle of least privilege for a user who only needs to view reports.

Concept tested: Microsoft 365 admin roles, least privilege

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#available-roles

Topics

#Role-based access control (RBAC)#Least privilege#Teams admin center#Analytics & reports

Community Discussion

No community discussion yet for this question.

Full MS-700 Practice