Question
You need to recommend a role for users to perform several required tasks. The solution must use the principle of least privilege.
Which roles should you recommend? To answer, drag the appropriate roles to the correct functions. Each role may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Explanation
Create new users: Office 365 global administrator - users are created in the Microsoft 365 admin center (Microsoft Entra ID); of the roles offered, only the Office 365 global administrator can create users. The Office 365 service administrator role is for managing service health and support requests, and the Dynamics 365 roles cannot create tenant users.
Assign roles to users: Dynamics 365 system administrator - security roles inside the Dataverse/Dynamics 365 environment are assigned by a user who holds the System Administrator security role in that environment, so there is no need for a tenant-wide admin role.
Perform backups for an instance: Dynamics 365 service administrator - this tenant role (now called Dynamics 365 administrator / Power Platform administrator) manages environments in the Power Platform admin center, including backup and restore, without granting global administrator rights.
