Exam MS-700 topic 2 question 59 discussion

The correct answer is: C. Global reader ✅ Explanation: To allow User1 to view Analytics & reports in the Microsoft Teams admin center while following the principle of least privilege, the Global reader role is the most appropriate choice. Global reader: Grants read-only access to all administrative features across Microsoft 365, including Teams analytics and reports. It does not allow making changes, which aligns with the least privilege principle. ❌ Why not the others? A. Teams Communication support specialist: Focuses on troubleshooting call quality issues, not general analytics or reports. B. Skype for Business administrator: Legacy role, not relevant for Teams analytics. D. Global administrator: Grants full access to all settings and data—too much privilege for a read-only requirement.

To allow User1 to view Analytics & reports in the Microsoft Teams admin center, and follow the principle of least privilege, you should assign: Teams Communications Support Specialist This role provides: Read-only access to Call Analytics Access to Teams usage reports Just enough permissions to view reports without granting unnecessary admin control. Global reader Can view everything in all admin centers but gives TOO MUCH visibility for a simple reporting need. Global administrator Full access to the entire tenant — massive OVERKILL and violates the principle of least privilege. Global roles = overpowered Skype admin = outdated

Reports Reader Users with this role can view usage reporting data and the reports dashboard in Microsoft 365 admin center and the adoption context pack in Fabric and Power BI. A user assigned to the Reports Reader role can access only relevant usage and adoption metrics. They don't have any admin permissions to configure settings or access the product-specific admin centers like Exchange. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#reports-reader How to access the reports To access the reports, you must be assigned one of the following roles: Teams or Skype for Business administrator. (might be deprecated) Global reader (only tenant-level aggregate and no per-user or team data). https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference#how-to-access-the-reports

difficult to say what the right answer is. The aim of the question is, you need to ensure that user1 can view Analytics and Reports. Global Reader has access to the Teams Admin Center and can see Analytics and Reports with the sub-items Usage Reports and Call Quality Dashboards. Teams Communication support specialist also has access to the Teams Admin Center and also sees Analytics and Reports, but only with the sub-item Call Quality Dashboards. Regarding least privilege and that we only know that he should read Analytics and Reports I would say Teams Communication support specialist. But that is interpretation as the question is imprecise.

https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference#how-to-access-the-reports To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data).

as per docs should be Global Reader: https://learn.microsoft.com/en-US/microsoftteams/teams-analytics-and-reports/teams-reporting-reference?WT.mc_id=TeamsAdminCenterCSH#:~:text=and%20communication%20efforts.-,How%20to%20access%20the%20reports,only%20tenant%2Dlevel%20aggregate%20and%20no%20per%2Duser%20or%20team%20data).,-To%20learn%20more

Global Reader can read everything that a Global Administrator can, but not update anything. So in the line of least privilege the answer should be C. Don't take my word for it, read the permissions on the link provided; https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-reader%20Global%20Reader%20cannot%20read%20Teams%20lifecycle,%20Analytics%20&%20reports,%20IP%20phone%20device%20management,%20and%20App%20catalog.%20For%20more%20information,%20see%20Use%20Microsoft%20Teams%20administrator%20roles%20to%20manage%20Teams.

To ensure that User1 can view Analytics & reports in the Microsoft Teams admin center while following the principle of least privilege, you should assign the role of "Teams Communication support specialist" to User1. This role provides the necessary permissions to access and manage Teams communication features without granting excessive administrative privileges.

You have a Microsoft Office 365 subscription that contains a user named User1. You need to ensure that User1 can view Analytics & reports in the Microsoft Teams admin center. The solution must use the principle of least privilege. Which role should you assign to User1? A. Teams Communication support specialist B. Skype for Business administrator Most Voted C. Global reader Most Voted D. Global administrator

Global reader (only tenant-level aggregate and no per-user or team data) The question asks for user1's data. so the answer is b

is the correct C

The correct answer is C. Global reader. To ensure that User1 can view Analytics & reports in the Microsoft Teams admin center with the principle of least privilege, you should assign the Global reader role to User1. The Global reader role is a read-only role that allows users to view all settings and reports in the Microsoft Teams admin center, but does not allow them to make any changes.

C - Global reader. Question states "view", which global reader role can accomplish. To add, there is no specific mention of tenant view or per-user view needed. So, going by the least principle aspect, Global reader fulfills the requirements of the question in hand. had the question been more specific, then i would change to Teams Admin.

To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data). To learn more about Teams admin roles and which reports each admin role can access, see Use Teams administrator roles to manage Teams. Go to the Microsoft Teams admin center, in the left navigation, select Analytics & reports, and then under View Reports, choose the report you want to run. https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference so which one is least previlege?

B. https://learn.microsoft.com/en-us/microsoftteams/get-started-with-teams-monitor-usage-and-feedback#teams-analytics--reports-microsoft-teams-admin-center

In one page says that Global reader can read everything, but in the specific global reader guidelines says: Teams admin center - Global Reader cannot read Teams lifecycle, Analytics & reports, IP phone device management, and App catalog. For more information, see Use Microsoft Teams administrator roles to manage Teams. reference https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-reader I'm not sure that it's B, but I'm sure that isn't C

"To view these reports, you must be a global admin in Microsoft 365 or Office 365, Teams service admin, or Skype for Business admin. " https://learn.microsoft.com/en-us/microsoftteams/get-started-with-teams-monitor-usage-and-feedback Answer is B