Exam MS-700 topic 5 question 25 discussion

tested the answer is C. Global Reader

According https://learn.microsoft.com/en-gb/microsoftteams/teams-analytics-and-reports/teams-reporting-reference#how-to-access-the-reports

Ans : A To allow User1 to view usage reports in the Microsoft Teams admin center while following the principle of least privilege, the Usage Summary Reports Reader role is the most appropriate. This role provides access to view usage reports across Microsoft 365, including Teams, without granting additional administrative permissions. Global Reader: While the Global Reader role can view all administrative features across Microsoft 365, it grants broader read-only access than necessary, violating the principle of least privileg

Please compare Global Reader and Usage Summary Reports Reader in the admin portal. And portal shows that Usage Summary Reports Reader has fewer privileges.

How to access the reports To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data).

Navigated to Usage Reports in TAC and clicked "Learn more" at the top. It brought me to the article which is saying next: How to access the reports To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data). So I assume the answer is C. Global Reader Link: https://learn.microsoft.com/en-US/microsoftteams/teams-analytics-and-reports/teams-reporting-reference?WT.mc_id=TeamsAdminCenterCSH

Usage Summary Reports Reader: This role grants access to aggregated, tenant-level Teams usage data. This means User1 can see overall trends and usage statistics but cannot access individual user or team data. This aligns with the principle of least privilege by providing the minimum necessary access to fulfill User1's task of viewing usage reports. Global Reader grants read-only access to almost all aspects of Microsoft 365, including user information, licenses, and security settings. It's far too much access for simply viewing Teams usage reports.

Some people here mentioned below link but this link is about Reports in MS365 AC. https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide The question mentioned about Usage reports in TAC, which is mentioned in below link. https://learn.microsoft.com/en-gb/microsoftteams/teams-analytics-and-reports/teams-reporting-reference#how-to-access-the-reports So, I think the correct answer is Global Reader.

least privilege is the key word

According to the Link both can. Global reader (with no user details) Usage Summary Reports reader (with no user details) https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide Between the two, the Usage Summary Reports Reader role has fewer privileges as it is limited to viewing only tenant-level aggregates in specific reports1.

According to the KB is should be A https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide