Microsoft 365 Administrator Expert MS-102 Practice Question

The Microsoft 365 Backup Operator role is designed for day-to-day restore operations. Members of this role can create and run restore jobs for all supported workloads and view job history and restore-point details, but they cannot change tenant-level backup configuration, create or edit backup policies, or purge backup data.

• The Backup Administrator role exceeds the requirement because it can configure backup policies and tenant settings.
• The Backup Reader role is insufficient; it provides read-only access and cannot run restores.
• The Global Reader role does not provide any Microsoft 365 Backup permissions.

Therefore, assigning the Microsoft 365 Backup Operator role delivers the required capabilities with the least privilege.