A company deploys an Office 365 tenant.
You must provide an administrator with the ability to manage company information in Office 365.
You need to assign permissions to the administrator by following the principle of least privilege.
Which role should you assign?
A.
Global administrator
B.
Service administrator
C.
Billing administrator
D.
User management administrator
Global admin has the most rights I thought. Service admin has the least or am wrong
http://technet.microsoft.com/en-us/library/hh852528.aspx
The link you have given clearly says that only global administrator can manage organisation information.
Company information is recorded at the time of account creation and the account creating the company is the first global administrator.
Service administrator
Sorry. Its global administrator
Global Administrator is right!
With the principal of least privilege, Service Administrator should be the answer.
Nevermind, the link clearly says global for managing company information.
the answer is A you can see https://support.office.com/en-US/Article/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504? note that the only role that can change company information is Global Administrator
you all guys are mad. answer is Service administrator.
Again one tricky one, where we don’t know if there is a typo or it is just tricky. It is clear that Service Admin can manage company information and Service Admin only view that info. As well is clear that least privilege goes to Service Admin. I think if there is typo then B should be correct, if not, then is clear and A is correct. Don’t forget to make comment to that question after the test.
As stated in the question, it needs to manage company info. From this link, Global Admin is the only role that can manage company info.
https://support.office.com/en-US/Article/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504
So I say A
An oldie but a goodie..
http://onlinehelp.microsoft.com/en-in/office365enterprises/gg243432.aspx#bkmk_EditProfile
Global admin: Has access to all administrative features. Global admins are the only admins who can assign other admin roles. You can have more than one global admin in your organization. The person who signs up to purchase Office 365 becomes a global admin.
Its global admin. The service admin only can view company info not manage. Refer the table on this article:
http://blogs.technet.com/b/lystavlen/archive/2012/04/10/administrator-roles-in-office-365.aspx
Global admin: manage organization info
other admins: view organization info and user info
So answer would be A.
Global Admin User Admin Password Admin Billing Admin Service Admin
View company and user information Y Y Y Y Y
Manage Office support tickets Y Y Y Y Y
Perform billing and purchasing operations for Office products Y Y
Reset user passwords Y Y Y
Create and manage user views Y Y
Create, edit, and delete users and groups, and manage user licenses Y Y*
Manage domains Y
Manage company information Y
Delegate administrative roles to others Y
Use directory synchronization Y
Enable or disable multi-factor authentication Y
*- With limitations. He or she cannot delete a global administrator or create other administrators.
Ok. Tried to format, but didn’t work.
This is how it goes:
Global has everything
User has 1,2,4,5,6. 6 with limitations mentioned in *
Password has 1,2,4
Billing has 1,2,3
Service Admin has 1,2.
Principle of least privilege would mean Service Admin “View company and user information”. But like Ali said, “Manage Company Info” can only be done by Global.
Tricky tricky tricky.
Billing admin can edit company profile. All links shown above is old and outdated.
I tested and confirmed, billing admin can edit company info.
Service admin cannot