Exam MS-100 topic 3 question 7 discussion

Actual exam question from Microsoft's MS-100

Question #: 7
Topic #: 3

HOTSPOT -
You have a Microsoft 365 tenant that contains a Microsoft Power Platform development environment named Dev1, a Power Platform production environment named Prod1, and two users named User1 and User2.
You need to assign roles to the users to meet the following requirements:
✑ User1 must have full access permissions to Dev1 and Prod1.
✑ User2 must be able to acquire and assign Microsoft Power BI licenses.
The solution must use the principle of least privilege.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/power-bi/admin/service-admin-licensing-organization https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide

by cscorrupt at Oct. 14, 2022, 1:12 p.m.

Comments

Submit Cancel

reastman66

Highly Voted 2 years, 7 months ago

I am think 1st one Environment Admin 2nd Microsoft Global Admin

upvoted 9 times

...

cscorrupt

Highly Voted 2 years, 8 months ago

Unless they mean access to everything and all everyones made/does, an environment maker should be enough for full access. ref: https://learn.microsoft.com/en-us/power-platform/admin/environments-overview

upvoted 6 times

...

BigDazza_111

Most Recent 2 years, 1 month ago

environment admin and 365 global admin

upvoted 1 times

...

vanr2000

2 years, 2 months ago

User1 - Environment Admin https://learn.microsoft.com/en-us/power-platform/admin/environments-overview User2 Global or Billing admin role in Microsoft 365 https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-purchasing-power-bi-pro

upvoted 2 times

...

steveofrobust

2 years, 3 months ago

I think: - User1: Power Platform Admin - User2: Power BI admin (has least privilege vs global admin and still can acquire and assign the Power BI license)

upvoted 2 times

DaDaDave

1 year, 11 months ago

Incorrect https://learn.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant#service-administrator-permission-matrix

upvoted 1 times

...

One111

2 years, 6 months ago

For environments with no Dataverse database, security roles can be assigned to individual users or groups from Azure AD. A user who has the Environment Admin role in the environment can take these steps. If the environment has a Dataverse database, a user must be assigned the System Administrator role instead of the Environment Admin role for full admin privileges. Environment Maker has no security roles permissions on db. Environment Admn has security roles permissions on db. https://learn.microsoft.com/en-us/power-platform/admin/database-security Global admins and Power Platform admins can create environments and assign security groups and users. https://learn.microsoft.com/en-us/power-platform/admin/create-environment IMHO right answers are: 1. Environment Admin and 2. Global admin.

upvoted 4 times

...