Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company’s Office 365 tenant. You discover that the employee can create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which role should you remove the employee? provisions an Office 365 tenant will automatically be assigned to the Global administrator role. In Office 365, a herself back to the SharePoint Online administrator role. Therefore, we should remove the employee from the
A.
Service administrator
B.
SharePoint Online administrator
C.
Global administrator
D.
Site collection administrator
Explanation:
The question states that “Another employee provisions the company’s Office 365 tenant”. The person who
Global administrator is also a SharePoint Online administrator.
We could prevent the employee from creating or managing site collections by removing the employee from the
SharePoint Online administrator role. However, as a Global Administrator, the employee could add himself/
Global Administrator role.
References: https://support.office.com/en-us/article/Assigning-admin-roles-in-Office-365-eac4d046-1afd-4f1a-
85fc-8219c79e1504?ui=en-US&rs=en-US&ad=US
This question always bothers me.