Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company’s Office 365 tenant. You discover that the
employee can create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which
role should you remove the employee?
A.
Service administrator
B.
SharePoint Online administrator
C.
Global administrator
D.
Site collection administrator
Shouldn’t the answer be “B – Sharepoint Online Administrator”?
https://support.office.com/en-au/article/Manage-administrators-for-a-site-collection-9a7e46f9-3fc4-4297-955a-82cb292a5be0
Steve,
I believe you are correct but technically, according your link, the Global is also the SPO Admin, and the question doesn’t state ‘least admin’ role possible as some questions do. So, C is also correct.
Aric
Okay, I found out why C is correct. The question states “Another employee provisions the company’s Office 365 tenant.” and you need to remove them from a role. Only a Global can provision an O365 tenant.
Correct.
Answer C is correct.
The person who provisions the company Office 365 tenant is the first global administrator who in turn is a SharePoint Online Administrator. As long as this person is a global administrator they will be able to create SharePoint sites. Now once the site collection is provisioned you can prevent them from managing the site itself by removing them from the Site Collection Administrator role. By doing this if they went directly to the site they wouldn’t be able to manage it, but they could always add themselves back to that role
The way the question is stated you would need to be a global administrator yourself and then remove the person who created the tenant as a global administrator.
“Add an administrator to the Site Collection Administrators list
If you are a Global Administrator or a SharePoint Online Administrator in SharePoint Online in Office 365 plans other than Office 365 Small Business, you must add your user name account to the Site Collection Administrator list on the SharePoint admin center page before you can add other site collection administrators via the Team Site. If you are a Global Administrator or SharePoint Online Administrator and you add yourself as a site collection administrator, performing this action is known as taking ownership of a site.”
https://support.office.com/en-au/article/Manage-administrators-for-a-site-collection-9a7e46f9-3fc4-4297-955a-82cb292a5be0
https://blogs.office.com/2015/06/11/more-control-over-data-access-with-workload-specific-admin-roles/
I stand with Justin on this one.
Agree the answer is C
As the Global Admin is a Role. The guy sounds dubious ( The word PREVENT) if we remove from Site or Sharepoint as Global he can readd the permission. Tuff his butt from Global.
https://support.office.com/en-us/article/Assigning-admin-roles-in-Office-365-eac4d046-1afd-4f1a-85fc-8219c79e1504?ui=en-US&rs=en-US&ad=US
Thanks, I have recently been looking for information about this topic for a long time and yours is the greatest I have discovered so far. However, what in regards to the conclusion? Are you certain concerning the supply?
I agree with Steve. The question only says to prevent ‘creating and managing sites collections’. By removing the user from global admin you are also peventing the user from administering non-sharepoint services so this is incorrect. Microsoft alway bang on about reading the question as it’s written and not reading anything else into it. So I would go with option B and wouldn’t care if it was considered wrong in the exam. Btw this is an great forum for learning.
Awesome article.Really appreciate it! Great.
rca-ieftin-online.com http://goo.gl/6GqA7S
The time to read or check out the subject material or web pages we’ve linked to beneath.
that is the finish of this article. Here you will uncover some web-sites that we think youll value, just click the links over
just beneath, are a lot of absolutely not related web pages to ours, even so, they’re surely really worth going over
one of our guests not long ago encouraged the following website
The time to study or pay a visit to the content material or web pages we have linked to beneath.
the time to study or take a look at the content material or web sites we’ve linked to below the
very couple of web-sites that occur to be comprehensive below, from our point of view are undoubtedly nicely worth checking out
check below, are some totally unrelated internet websites to ours, having said that, they may be most trustworthy sources that we use
the time to read or take a look at the subject material or sites we have linked to below the
please stop by the internet sites we stick to, such as this 1, as it represents our picks from the web
we like to honor quite a few other world-wide-web internet sites on the internet, even though they arent linked to us, by linking to them. Underneath are some webpages really worth checking out
Sites of interest we’ve a link to
Every once in a when we decide on blogs that we study. Listed beneath are the latest web-sites that we select
that is the end of this write-up. Right here youll obtain some web sites that we think you will appreciate, just click the hyperlinks over
we prefer to honor quite a few other internet web-sites around the web, even though they arent linked to us, by linking to them. Under are some webpages worth checking out