Microsoft 365 Administrator Expert MS-102 Practice Question
Your company's Microsoft 365 tenant contains more than 30,000 users and several security-sensitive teams. Members of the Data Governance team must be able to run Content searches and preview the search results in the Microsoft Purview compliance portal, but they must be blocked from exporting any data or creating new eDiscovery cases. Which approach meets the requirement while following least-privilege and auditable delegation practices?
Add the Data Governance team to the built-in eDiscovery Manager role group in the Microsoft Purview compliance portal.
Create a custom role group in the Microsoft Purview compliance portal that contains only the Compliance Search role, and add the Data Governance team as members.
Assign the Microsoft Entra Security Reader role to the Data Governance team and enable PIM for just-in-time elevation.
Create a role group in Microsoft Defender XDR with the Investigation role and include the Data Governance team.
The ability to run a Content search and preview items is granted by the Compliance Search role in Microsoft Purview. The Export role is required to download results, and Case Management is required to create eDiscovery cases. Because the built-in eDiscovery Manager role group contains all three roles, using it would over-grant permissions. Creating a custom role group in the Purview compliance portal that includes only the Compliance Search role lets the Data Governance team perform the required tasks and nothing more, satisfying least-privilege principles. Assigning Azure AD roles, Microsoft 365 service admin roles, or Defender role groups would not give Content search rights in Purview.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Compliance Search role in Microsoft Purview?
Open an interactive chat with Bash
What is the importance of least-privilege delegation in security-sensitive scenarios?
Open an interactive chat with Bash
What is the difference between custom role groups and built-in role groups in Microsoft Purview?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .