Exam MB-200 All Questions

View all questions & answers for the MB-200 exam

Exam MB-200 topic 4 question 3 discussion

Actual exam question from Microsoft's MB-200

Question #: 3
Topic #: 4

HOTSPOT -
You are a Microsoft 365 administrator. You create a Dynamics 365 online tenant in the environment.
You must assign users into Office 365 security roles using the principle of least privilege.
You need to assign security roles for users.
Which role should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/use-service-admin-role-manage-tenant

by drpepper24 at Sept. 4, 2019, 1:49 p.m.

Comments

Submit Cancel

joey2506

Highly Voted 5 years, 8 months ago

All wrong guys.. come on. Configure Server-Side Sync: Dyn 365 Admin. Allocate user: Global Admin. Configure new Instances: Dyn 365 Admin Backup and restore: Dyn 365 Admin Add account: User. An office 365 service admin has full access to office services, he can do almost everything a Global Admin does, except buy products and assing liceses to users. The questio is about the fewer the better.

upvoted 30 times

vortex1

5 years, 8 months ago

Correct - Additionally a License Administrator can assign licenses but otherwise only Global Admin can do this.

upvoted 2 times

...

maximn1384

5 years, 6 months ago

@joey2506 whey then you selected Global Admin for #2? Shouldn't it be a Service Admin?

upvoted 1 times

qa

5 years, 4 months ago

based on the link, only global admin can add licenses.

upvoted 1 times

...

MAKHUNXA

Highly Voted 5 years, 6 months ago

The correct answers: 1- Global Admin (to approve mailboxes) 2- Global Admin (Allocate Licenses to users) 3- D365 Service Admin 4- D365 Service Admin Ref: https://docs.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant

upvoted 23 times

...

AneeG

Most Recent 4 years, 12 months ago

In my exam

upvoted 1 times

...

arishka

5 years ago

in exam: Configure Server-Side Sync: Dyn 365 Admin. Allocate user: Global Admin. Configure new Instances: Dyn 365 Admin Backup and restore: Dyn 365 Admin Add account: User.

upvoted 3 times

david535

4 years, 11 months ago

Hi arishka, are there 5 options on your exam? and is your answer right? Thanks

upvoted 1 times

mont_hy

4 years, 11 months ago

These were for an updated version of questions, but the first answer should be Office 365 global admin.

upvoted 1 times

...

Ameen

5 years ago

In exam

upvoted 1 times

...

cch999

5 years, 2 months ago

on exam

upvoted 2 times

...

Ayeenm

5 years, 4 months ago

in exam

upvoted 2 times

...

omarrana

5 years, 7 months ago

in exam

upvoted 4 times

t8203

5 years, 5 months ago

saw this question in exam too

upvoted 2 times

...

Arki

5 years, 8 months ago

ok, but there can be no "either-or" answer and question-text is clearly calling for the "using the principle of least privilege.” So following this principle and the matrix from this link (https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/use-service-admin-role-manage-tenant): 1. Configuration server side sync: Dynamics 365 service admin 2. Allocate license to users: Office 365 service admin 3. Configure a new instance: Dynamics 365 service admin 4. Backup and restore: Dynamics 365 service admin The permission for "adding accounts" the second requirement in this question and "least privilege" in combination with the first requirement.

upvoted 2 times

Fyrus

5 years, 8 months ago

bu the link, only License administrator and Office 365 global admin can allocate license to users.

upvoted 5 times

...

Nyanne

4 years, 9 months ago

Only Global Admin can approve mailboxes from within D365 https://docs.microsoft.com/en-us/power-platform/admin/connect-exchange-online#permission-model https://www.youtube.com/watch?v=1s-BYNdvBvM&feature=youtu.be

upvoted 1 times

Nyanne

4 years, 9 months ago

(For configuring server side sync)

upvoted 1 times

...

Suchi

5 years, 9 months ago

Configuration server side sync: Dynamics 365 service admin Allocate license to users: Office 365 service admin Configure a new instance: Dynamics 365 service admin or Office 365 global administrator Backup and restore: Office 365 GLOBAL admin or Dynamics 365 service admin Add account in sales: user Refer to the grid on this link https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/use-service-admin-role-manage-tenant

upvoted 7 times

...

mgharably

5 years, 9 months ago

Configuration server side sync: dynamics admin Allocate license to users: office 365 admin Configure a new instance: office 365 service admin Backup and restore: office 365 service admin Add account in sales: user

upvoted 7 times

vens

5 years, 9 months ago

mgharaby, Dynamics 365 admin can also backup & restore instance and configure new instance

upvoted 7 times

...

Subodh

5 years, 6 months ago

Server side synchronization needs to be done by Office 365 Global admin only, since it needs to approve email address in the D365 mailbox. Only Global admin can approve the email address.

upvoted 13 times

MAKHUNXA

5 years, 6 months ago

its true Global admin or service admin can do it but not D365 Sys Admin.

upvoted 3 times

...

Nyanne

4 years, 9 months ago

Confirmed. I've tested this with System admin and an error message appears that you require Global Admin to approve mailbox.

upvoted 1 times

...

D365V

5 years, 9 months ago

The question has an error. 'Backup and restore Dynamics 365' and 'Add accounts to Dynamics 365 for Sales' are two separate requirements each of which has a drop down with the list of options. Also, the choices are Office 365 global administrator (not just 'global administrator' and Office 365 service administrator (not just 'service administrator')

upvoted 10 times

Nyanne

4 years, 9 months ago

YES watch out guys. This was in my exam too. 'Backup and restore Dynamics 365' and 'Add accounts to Dynamics 365 for Sales' are asked separately,. I would say backup and restore = D365 Service admin and add accounts to D365 Sales = User (no admin privileges)

upvoted 5 times

...

drpepper24

5 years, 9 months ago

can someone confirm the answer to this?

upvoted 1 times

Qr4nk

5 years, 3 months ago

All of them are true. Some comments here are misleading. Server Side Sync is only configurable from a GA

upvoted 4 times

...