Microsoft Information Protection and Compliance Administrator — Question 68

You have a Microsoft 365 tenant that is opt-in for trainable classifiers.

You need to ensure that a user named User1 can create custom trainable classifiers. The solution must use the principle of least privilege.

Which role should you assign to User1?

Answer options

• A. Global Administrator
• B. Security Operator
• C. Security Administrator
• D. Compliance Administrator

Correct answer: D

Explanation

The Compliance Administrator role is necessary for creating and managing custom trainable classifiers within Microsoft 365, as it grants the required permissions without giving excessive access. The other roles, such as Global Administrator and Security Administrator, provide broader permissions that exceed what is needed for this specific task, violating the principle of least privilege.