Deploying Microsoft 365 Teamwork (legacy) — Question 8
You work for a company named Contoso, Ltd.
Contoso has a Microsoft 365 subscription.
You plan to implement Microsoft OneDrive for Business for all users.
You need to ensure that a group named Auditors can perform eDiscovery for all new OneDrive sites. The solution must use the principle of least privilege.
What is the best way to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
Answer options
- A. From the Microsoft 365 admin center, assign Auditors the Global administrator role
- B. Add auditors as site collection administrator of Contoso-my
- C. From the Microsoft 365 admin center, assign Auditors the Compliance Administrator role
- D. Add Auditors as a My Site Secondary Admin
Correct answer: D
Explanation
The correct answer is D because adding Auditors as a My Site Secondary Admin allows them to perform eDiscovery tasks without granting excessive permissions. Option A is incorrect as it gives too much power with the Global administrator role, while option B only provides permissions for a specific site rather than all new sites. Option C, the Compliance Administrator role, may not adhere to the least privilege principle for this specific requirement.