Microsoft
SC-300 · Question #147
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. You need to ensure that User1 can create access reviews for groups, and that User2 can re
Sign in or unlock SC-300 to reveal the answer and full explanation for question #147. The question stem and answer options stay visible for context.
Submitted by cyberguy42· Mar 6, 2026Manage identity and access - specifically implementing and managing Azure AD Identity Governance features and assigning appropriate administrative roles using least privilege principles (Microsoft SC-300 / MS-102 certification domains).
Question
Drag and Drop Question You have a Microsoft 365 E5 subscription that contains two users named User1 and User2. You need to ensure that User1 can create access reviews for groups, and that User2 can review the history report for all the completed access reviews. The solution must use the principle of least privilege. Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
Drag items
Global administratorGlobal readerReports readerSecurity operatorSecurity readerUser administrator
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure AD Identity Governance#Access Reviews#Role-Based Access Control#Principle of Least Privilege