Exam MS-700 topic 2 question 44 discussion

B (SfB admin) is correct. https://docs.microsoft.com/en-us/microsoftteams/get-started-with-teams-monitor-usage-and-feedback This link mentioned "To view these reports, you must be a global admin in Microsoft 365 or Office 365, Teams service admin, or Skype for Business admin"

Skype for business is dead..

B or c according to https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference So least privilege is C

To access the reports, you must be assigned one of the following roles: Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data). Source: https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference

global reader would give you permissions to read all of Entra, definitely not least privilege. Not sure, why this would not be Reports reader.

To ensure that User1 can view Analytics & reports in the Microsoft Teams admin center while adhering to the principle of least privilege, you should assign User1 the D. Reports reader role. The Reports reader role is specifically designed to give users read-only access to usage reports and analytics in the Microsoft 365 admin center and Teams admin center. This role allows User1 to view reports without granting broader administrative privileges that are not necessary for viewing analytics.

Both options C (Global reader) and D (Reports reader) have their merits, and the choice depends on the specific requirements and desired level of access. Here's a summary: - **Global reader (C)**: Provides access to tenant-level aggregate data without exposing per-user or per-team details. Suitable for general analytics and reports across the entire organization. - **Reports reader (D)**: Specifically grants access to view Teams-related reports within the Microsoft Teams admin center. Focused on Teams usage and activity. Considering your explanation, if broader analytics access is needed while still restricting per-user or per-team details, option D (Reports reader) would indeed be the better choice.

As per MS articles in 2024, it should be C - Global Reader. Skype for buisness admin does not exists. Report reader cannot access - Analytics report Hence it should be global reader Reference - https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide

The correct answer is D

The correct answer is D. Among the choices, D represents the least privilege, and I confirmed this on my test tenant. I assigned the role using Entra ID, and the user now has access to analytics and reports.

I'll go with C as the correct answer. Keyword used "least privilige" How to access the reports To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data). https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference

Looks like C as least privilege is 'Global reader'. (Question states that you only need to view analytics and reports.)

Out of the page below. https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference How to access the reports To access the reports, you must be assigned one of the following roles: Global administrator. Teams or Skype for Business administrator. Global reader (only tenant-level aggregate and no per-user or team data).

Even the chat GPT says it should be report reader

https://learn.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-reporting-reference

is these one sure

Corect answer is B because Teams admin center - Global Reader cannot read Teams lifecycle, Analytics & reports, IP phone device management, and App catalog. https://learn.microsoft.com/en-US/azure/active-directory/roles/permissions-reference?WT.mc_id=365AdminCSH#global-reader