Exam MS-500 topic 1 question 31 discussion

The answer is 100% correct. An E-Discovery Administrator role is superior in terms of RBAC than E-Discovery Manager.

eDiscovery manager role is correct

The easiest way to do this is to go to the Permissions page in the compliance center and add users to the eDiscovery Manager role group.

The provided answer is correct. The eDiscovery Manager role allows access specifically to cases it has created or been assigned to whereas the admin role has access to all cases.

Thanks to Exam topic, was able to answer this question confidently - july 27,2022

A is correct answer. Now in SC-400 exam.

A is correct!

The answer is correct. the MANAGER role allows only access to cases it has created _or been assigned to_. The admin role has access to all cases. So after assigning User 1 the MANAGER role, you would then assign the case to User 1.

Check this page out for the difference between the 2 roles https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions?view=o365-worldwide The manager is the least privilege option as it only has access to cases it created or it has been added to.

"The primary difference between an eDiscovery Manager and an eDiscovery Administrator is that an eDiscovery Administrator can access all cases that are listed on the eDiscovery cases page in the Security & Compliance Center. An eDiscovery manager can only access the cases they created or cases they are a member of." https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center?view=o365-worldwide#:~:text=The%20primary%20difference%20between%20an,they%20are%20a%20member%20of. So I think that in this case, since User 1 didn't create Case1, he should be eDiscovery Admin in order to access and export the results. Thoughts?

E discovery manager is least privilege role, of course admin also correct but clearly stated least privilege,

I would go for C: eDiscovery Administrator as the requirement is "use the principle of least privilege", as administrator is a member of the manager role with export access.

A is correct; https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions?view=o365-worldwide