You have a Microsoft 365 tenant that contains two groups named Group1 and Group2. You use Microsoft Defender XDR to manage the tenants of your company's customers. You need to ensure that the users…

You have a Microsoft 365 tenant that contains two groups named Group1 and Group2. You use Microsoft Defender XDR to manage the tenants of your company's customers. You need to ensure that the users in Group1 can perform security tasks in the tenant of each customer. The solution must meet the following requirements:

• The Group1 users must only be assigned the Security Operator role for

the customer tenants.

• The users in Group2 must be able to assign the Security Operators

role to the Group1 users for the customer tenants.

• The use of quest accounts must be minimized.
• Administrative effort must be minimized.

What should you include in the solution?