Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

The Help Desk Operator role is intended for front-line support staff. It allows remote device actions such as passcode reset, remote lock, wipe, retire, and BitLocker key rotation, but it does not permit editing or creating compliance or configuration policies, nor does it allow deleting devices. Policy and Profile Manager and Intune Administrator both provide rights to modify policies, exceeding the requirement. Endpoint Security Manager focuses on security baselines and Defender settings and does not include the needed remote help-desk actions.