Exam MS-500 topic 2 question 37 discussion

Vaild on exam 9/21/2022

The answer is D, User2. Only users with the Security Administrator role in Azure AD can enable Microsoft Defender for Endpoint roles. The other roles, such as Application Administrator, Security Operator, and User Administrator, do not have the necessary permissions. Here is a table of the permissions for each role: Role Permissions Security Administrator Can enable Microsoft Defender for Endpoint roles Security Operator Can view and manage Microsoft Defender for Endpoint data Application Administrator Can manage applications and users User Administrator Can manage user accounts

The Security Administrator and the Global Administrator can enable roles in the Microsoft Defender portal.

When you first log in to the Microsoft 365 Defender portal, you're granted either full access or read only access. Full access rights are granted to users with Security Administrator or Global Administrator roles in Azure AD. Read only access is granted to users with a Security Reader role in Azure AD.

Before enabling the feature, it's important that you have a Global Administrator role or Security Administrator role in Azure AD and that you have your Azure AD groups ready to reduce the risk of being locked out of the portal.