exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 1 question 30 discussion

Actual exam question from Microsoft's MS-500
Question #: 30
Topic #: 1
[All MS-500 Questions]

You have a Microsoft 365 subscription that contains a user named User1.
You plan to use Compliance Manager.
You need to ensure that User1 can assign Compliance Manager roles to users. The solution must use the principle of least privilege.
Which role should you assign to User1?

  • A. Compliance Manager Assessor
  • B. Global Administrator
  • C. Portal Admin
  • D. Compliance Manager Administrator
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Mendel
Highly Voted 4 years, 3 months ago
Both Portal Admin and Global Admin is correct. Portal Admin is for the classic portal (which will be deprecated) and Global Admin for new portal. Classic: https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide#permissions-and-role-based-access-control%20//%20Portal%20Admin. New: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide
upvoted 12 times
...
dzampar
Highly Voted 4 years, 8 months ago
My guess is that the answer is wrong as I couldn't find any portal admin role. So regarding the options provided, I would go with the global admin as per the link below. https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#role-types
upvoted 8 times
...
Maxx4
Most Recent 2 years ago
Selected Answer: D
he answer is D, Compliance Manager Administrator. The Compliance Manager Administrator role allows users to assign Compliance Manager roles to other users. This is the most specific role that allows User1 to perform this task, and it follows the principle of least privilege because it does not grant User1 any other unnecessary permissions. The other roles are not as specific and would grant User1 more permissions than they need. For example, the Global Administrator role grants users full control over the Microsoft 365 subscription, and the Portal Admin role grants users the ability to manage the Compliance Manager portal.
upvoted 3 times
McMac
2 years ago
No, the 'Compliance Admin' can but not the 'Compliance Manager Admin'
upvoted 2 times
...
...
gaida
2 years, 8 months ago
Global admin is correct when it comes to roles assignment
upvoted 2 times
...
Eltooth
2 years, 11 months ago
Selected Answer: B
B is correct answer.
upvoted 1 times
...
LoremanReturns
3 years, 2 months ago
Answer is correct: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide
upvoted 1 times
...
arska
3 years, 3 months ago
Selected Answer: B
See Mendel.
upvoted 2 times
...
mkoprivnj
3 years, 7 months ago
Selected Answer: B
B is correct!
upvoted 3 times
...
Yetijo
4 years ago
Global Administrator The answer is here in the docs. Also reference the table for Role Types in the following section from the link. The last row clearly indicates GA is required for assignments. https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#set-user-permissions-and-assign-roles
upvoted 4 times
...
Rstilekar
4 years ago
Global Admin is correct. Portal Admin role was in old compliance admin portals that is retired now already and not available to use anymore.
upvoted 4 times
...
ZakS
4 years, 1 month ago
Ans GLOBAL ADMINISTRATOR is correct. https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide "The person holding the global admin role for your organization can set user permissions for Compliance Manager. Permissions can be set in the Office 365 Security & Compliance center as well as in Azure Active Directory (Azure AD)."
upvoted 2 times
...
DudleyYVR
4 years, 2 months ago
It's C. Global Admin is NOT LEAST PRIVILEGE. So that's wrong. RBAC for Portal Admin still exists.
upvoted 2 times
...
SerhioG
4 years, 3 months ago
Role types The table below shows the functions allowed by each role in Compliance Manager. The table also shows how each Azure AD role maps to Compliance Manager roles. Users will need at least the Compliance Manager reader role, or Azure AD global reader role, to access Compliance Manager. Types User can:Compliance Manager role:Azure AD role Read but not edit data:Compliance Manager Reader:Azure AD Global reader, Security reader Edit data:Compliance Manager Contribution:Compliance Administrator Edit test results:Compliance Manager Assessment:Compliance Administrator Manage assessments,and template and tenant data:Compliance Manager Administration:Compliance Administrator, Compliance Data Administrator,Security Administrator Assign users:Global Administrator:Global Administrator https://docs.microsoft.com/ru-ru/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#role-types
upvoted 1 times
...
Rafale
4 years, 3 months ago
Global Administrator is the correct answer. No role called Portal Admin.
upvoted 1 times
...
diazed
4 years, 3 months ago
B for sure. The person holding the global admin role for your organization can set user permissions for Compliance Manager. https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide
upvoted 2 times
...
kiketxu
4 years, 3 months ago
Seems out of data this question due "Portal Admin", nowdays I hope we can found it updated in the exam. B for sure! https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#role-types
upvoted 3 times
Discuss4certi
4 years, 3 months ago
Indeed, i went looking in the permissions section of the compliance admin center. No portal admin to be found. So indeed this question is probably outdated. If i were to get it today i would pick global admin
upvoted 2 times
...
...
eltom
4 years, 4 months ago
Only global administrator can assign Compliance Manager roles to users https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#role-types Assign users Global Administrator Global Administrator
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...