PrepAway - Latest Free Exam Questions & Answers

which role should you remove the employee?

Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company’s Office 365 tenant. You discover that the
employee can create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which
role should you remove the employee?

PrepAway - Latest Free Exam Questions & Answers

A.
Service administrator

B.
SharePoint Online administrator

C.
Global administrator

D.
Site collection administrator

26 Comments on “which role should you remove the employee?

    1. Aric says:

      Steve,
      I believe you are correct but technically, according your link, the Global is also the SPO Admin, and the question doesn’t state ‘least admin’ role possible as some questions do. So, C is also correct.

      Aric




      0



      0
    2. Aric says:

      Okay, I found out why C is correct. The question states “Another employee provisions the company’s Office 365 tenant.” and you need to remove them from a role. Only a Global can provision an O365 tenant.




      0



      0
  1. Justin Thompson says:

    Answer C is correct.

    The person who provisions the company Office 365 tenant is the first global administrator who in turn is a SharePoint Online Administrator. As long as this person is a global administrator they will be able to create SharePoint sites. Now once the site collection is provisioned you can prevent them from managing the site itself by removing them from the Site Collection Administrator role. By doing this if they went directly to the site they wouldn’t be able to manage it, but they could always add themselves back to that role

    The way the question is stated you would need to be a global administrator yourself and then remove the person who created the tenant as a global administrator.

    “Add an administrator to the Site Collection Administrators list

    If you are a Global Administrator or a SharePoint Online Administrator in SharePoint Online in Office 365 plans other than Office 365 Small Business, you must add your user name account to the Site Collection Administrator list on the SharePoint admin center page before you can add other site collection administrators via the Team Site. If you are a Global Administrator or SharePoint Online Administrator and you add yourself as a site collection administrator, performing this action is known as taking ownership of a site.”

    https://support.office.com/en-au/article/Manage-administrators-for-a-site-collection-9a7e46f9-3fc4-4297-955a-82cb292a5be0

    https://blogs.office.com/2015/06/11/more-control-over-data-access-with-workload-specific-admin-roles/




    0



    0
  2. iphone 5s says:

    Thanks, I have recently been looking for information about this topic for a long time and yours is the greatest I have discovered so far. However, what in regards to the conclusion? Are you certain concerning the supply?




    0



    0
  3. Paul says:

    I agree with Steve. The question only says to prevent ‘creating and managing sites collections’. By removing the user from global admin you are also peventing the user from administering non-sharepoint services so this is incorrect. Microsoft alway bang on about reading the question as it’s written and not reading anything else into it. So I would go with option B and wouldn’t care if it was considered wrong in the exam. Btw this is an great forum for learning.




    0



    0

Leave a Reply