Exam MS-700 topic 2 question 83 discussion

Configuring and using the expiration policy for Microsoft 365 groups requires you to possess but not necessarily assign Microsoft Entra ID P1 or P2 licenses for the members of all groups to which the expiration policy is applied. For more information, see Getting started with Microsoft Entra ID P1 or P2. Groups Administrator ---- Members of this role can create/manage groups, create/manage groups settings like naming and expiration policies, and view groups activity and audit reports.(as of March4,2025) https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide#who-can-configure-and-use-the-microsoft-365-groups-expiration-policy Groups Administrator role is already assigned to user so the only option left is (A) Upgrade the Azure AD liscense. ***Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.***

Group administrator can already create expiration policies

Groups Administrator role can manage/create the expiration policy. So the answer is: A. Upgrade the Azure AD license. https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide

See link by Nico 282 : You are assigned group administrator, so you are allowed to set retentions. The other requirement is an AzureAD license.

https://techcommunity.microsoft.com/t5/microsoft-365-groups/introducing-the-groups-admin-role/m-p/978995

https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide#who-can-configure-and-use-the-microsoft-365-groups-expiration-policy

https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide#who-can-configure-and-use-the-microsoft-365-groups-expiration-policy Who can configure and use the Microsoft 365 groups expiration policy? Office 365 global admin (in Azure, the Company administrator), User administrator No mention of the Groups Administrator role.

Second sentence is: You ARE assigned the Groups Administrator role.

https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide#who-can-configure-and-use-the-microsoft-365-groups-expiration-policy

a group administrator is able to configure a M365 group expiration policy but the feature is bundled in an Azure AD premium license. so the first thing to check if the group administrator is unable to configure M365 expiration is the license if it is premium so the answer should be A

Configuring and using the expiration policy for Microsoft 365 groups requires you to possess but not necessarily assign Azure AD Premium licenses for the members of all groups to which the expiration policy is applied. Role: Global administrator, Group administrator, or User administrator. Remenber, the solution must use the principle of least privilege. https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-lifecycle

When you sign up for Microsoft 365 Business, you automatically become a global admin. So you have to assume in this scenario there was already a global admin in place. https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide

Office 365 global admin (in Azure, the Company administrator), User administrator: Create, read, update, or delete the Microsoft 365 groups expiration policy settings.

We indeed require Azure AD premium but However the Group Expiration Policy can only be enabled by a Global or User Administrator for your tenant. Let's assume they're just lack of administration authority

On test 28.04.2023 (I'm not a bot you can trust me :D) - Reveal solution then check discussion and go for the high upvoted answers in discussion :)

Configuring and using the expiration policy for Microsoft 365 groups requires you to possess but not necessarily assign Azure AD Premium licenses for the members of all groups to which the expiration policy is applied. For more information, see Getting started with Azure Active Directory Premium.

A is correct answer. You must need to upgrade first to Azure AD license