PrepAway - Latest Free Exam Questions & Answers

Which role should you assign?

A company deploys an Office 365 tenant.
You must provide an administrator with the ability to manage company information in Office 365.
You need to assign permissions to the administrator by following the principle of least privilege.
Which role should you assign?

PrepAway - Latest Free Exam Questions & Answers

A.
Global administrator

B.
Service administrator

C.
Billing administrator

D.
User management administrator

24 Comments on “Which role should you assign?

  1. Ali says:

    Again one tricky one, where we don’t know if there is a typo or it is just tricky. It is clear that Service Admin can manage company information and Service Admin only view that info. As well is clear that least privilege goes to Service Admin. I think if there is typo then B should be correct, if not, then is clear and A is correct. Don’t forget to make comment to that question after the test.




    0



    0
    1. Justin Thompson says:

      Global admin: Has access to all administrative features. Global admins are the only admins who can assign other admin roles. You can have more than one global admin in your organization. The person who signs up to purchase Office 365 becomes a global admin.




      0



      0
  2. Prady says:

    Global Admin User Admin Password Admin Billing Admin Service Admin
    View company and user information Y Y Y Y Y
    Manage Office support tickets Y Y Y Y Y
    Perform billing and purchasing operations for Office products Y Y
    Reset user passwords Y Y Y
    Create and manage user views Y Y
    Create, edit, and delete users and groups, and manage user licenses Y Y*
    Manage domains Y
    Manage company information Y
    Delegate administrative roles to others Y
    Use directory synchronization Y
    Enable or disable multi-factor authentication Y

    *- With limitations. He or she cannot delete a global administrator or create other administrators.




    0



    0
  3. Prady says:

    Ok. Tried to format, but didn’t work.
    This is how it goes:
    Global has everything
    User has 1,2,4,5,6. 6 with limitations mentioned in *
    Password has 1,2,4
    Billing has 1,2,3
    Service Admin has 1,2.
    Principle of least privilege would mean Service Admin “View company and user information”. But like Ali said, “Manage Company Info” can only be done by Global.
    Tricky tricky tricky.




    0



    0
  4. startbucks says:

    Billing admin can manage company info, but it cannot edit the following.

    Manage custom themes for your organization
    Add custom tiles for your organization
    Provide customized help desk contact info

    So I’m thinking billing is the answer since the question requires least privilege.




    0



    0

Leave a Reply