MS-700 · Question #67
You have a Microsoft Office 365 subscription that contains a user named User1. You need to ensure that User1 can view Analytics & reports in the Microsoft Teams admin center. The solution must use…
The correct answer is C. Global reader. To grant User1 view-only access to Analytics & reports in the Microsoft Teams admin center with the principle of least privilege, the Global reader role is the most appropriate assignment.
Question
Options
- AGroups administrator
- BSkype for Business administrator
- CGlobal reader
- DGlobal administrator
How the community answered
(35 responses)- A6% (2)
- B3% (1)
- C89% (31)
- D3% (1)
Why each option
To grant User1 view-only access to Analytics & reports in the Microsoft Teams admin center with the principle of least privilege, the Global reader role is the most appropriate assignment.
The Groups administrator role primarily manages Microsoft 365 Groups and does not inherently provide access to Teams analytics and reports.
The Skype for Business administrator role is for managing Skype for Business, which is a different service than Microsoft Teams.
The Global reader role provides view-only access to all administrative features across Microsoft 365 admin centers, including analytics and reports in the Microsoft Teams admin center. This satisfies the requirement for viewing capabilities without providing unnecessary modification permissions, aligning with the principle of least privilege.
The Global administrator role provides full control over all Microsoft 365 services, which violates the principle of least privilege for a user who only needs to view reports.
Concept tested: Microsoft 365 admin roles, least privilege
Source: https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#available-roles
Topics
Community Discussion
No community discussion yet for this question.