SC-401 · Question #77
You have a Microsoft 365 subscription that contains a user named User1. User1 plans to export a history of Microsoft Purview communication compliance policy changes. You need to add User1 to a role…
The correct answer is B. Communication Compliance Viewers. The principle of least privilege requires granting only the permissions necessary to perform the task. User1 needs to export a history of policy changes - a read-only reporting task. The Communication Compliance Viewers role group provides read-only access to communication…
Question
You have a Microsoft 365 subscription that contains a user named User1. User1 plans to export a history of Microsoft Purview communication compliance policy changes. You need to add User1 to a role group in Microsoft Purview. The solution must follow the principle of least privilege. To which role group should you add User1?
Options
- ACommunication Compliance Investigators
- BCommunication Compliance Viewers
- CCommunication Compliance Analysts
- DCommunication Compliance Administrators
How the community answered
(52 responses)- A10% (5)
- B69% (36)
- C6% (3)
- D15% (8)
Explanation
The principle of least privilege requires granting only the permissions necessary to perform the task. User1 needs to export a history of policy changes - a read-only reporting task. The Communication Compliance Viewers role group provides read-only access to communication compliance activity reports and audit history, which is sufficient for this purpose. Communication Compliance Analysts (C) and Investigators (A) have additional permissions to review message content and manage alerts, which are not needed here. Communication Compliance Administrators (D) have full control including creating and modifying policies - far more than required. Viewers is the minimum role that satisfies this requirement.
Topics
Community Discussion
No community discussion yet for this question.