Exam SC-300 topic 1 question 56 discussion

Role explained here: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#helpdesk-administrator

ONLY the following tasks. Indeed Helpdesk Admin can fulfill the three requirements, but has other permissions, which are labeled PRIVILEGED in https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#helpdesk-administrator

To meet these specific requirements while minimizing administrative overhead, the optimal solution is to assign the "Service Support Administrator" role to Admin1. Here’s why this works: The Service Support Administrator role allows a user to: Create and manage support requests in both the Microsoft 365 admin center and the Azure portal. View and configure Service Health and Message Center notifications in Microsoft 365. It does not grant broader administrative privileges—making it ideal for least-privilege scenarios. Why this is the best fit it covers all three tasks listed. It’s a built-in role, so you don’t need to create a custom one. Assigning it is straightforward, reducing administrative effort.

This question tests reading comprehension. While the Helpdesk Administrator role meets the following requirements: Create and manage Azure support tickets microsoft.azure.supportTickets/allEntities/allTasks Read and configure Service Health in the Microsoft 365 admin center microsoft.office365.serviceHealth/allEntities/allTasks Create and manage Microsoft 365 service requests microsoft.office365.supportTickets/allEntities/allTasks the questions is asking for least privilege to only allow what is listed above and that can only be done with a custom role....so D is the answer.

Answer) D Helpdesk Administrator CANNOT configure service health...so this is why answer is D and not "Helpdesk Administrator"

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#helpdesk-administrator

D. I would say that least privileged is always more important than minimizing administrative effort.

In the real world, the Service Support Administrator role exists for this use case.

It's C, a custom role isnt the least administrative effort.

The best solution is D, de one with the least administrative effort is C so i say C.

need to ensure that Admin1 can perform only the following tasks means that create a custom role an assign what you want a user can perform as admin :) D - D - D - D - ::)))

Help desk admin - description - role permissions. Here, the 3 items in the question are listed under lines 5,6,8 verbatim.

It is for ONLY these items and HD Admin does alot more so a custom role for it fits the bill.

"minimize administrative effort" using custom role? hum..

"can perform only".. Helpdesk admin can do more then that. So D.

Key word here is "ONLY", implying they can't perform any task outside of the three listed. D is the correct answer

It doesn't ask for password resets so why would you give such privileges. Has to be D.