WorksheetsAdministrator Roles and Responsibilities
Total questions: 74
Worksheet time: 37mins
What is the main responsibility of an Application Administrator?
Can create and manage all aspects of app registrations and enterprise apps.
Can create attack payloads that an administrator can initiate later.
Can manage Azure DevOps organization policy and settings.
Can perform common billing related tasks like updating payment information.
Fill in the blank: An Application Developer
can create application registrations independent of the 'Users can register applications' setting.
can only create application registrations if the 'Users can register applications' setting is enabled.
cannot create application registrations at all.
can only view application registrations but not create them.
What can an Attack Payload Author do?
Can create attack payloads that an administrator can initiate later.
Can manage all aspects of attack simulation campaigns.
Can access to view, set and reset authentication method information for any non-admin user.
Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).
Fill in the blank: An Attack Simulation Administrator can create and manage all aspects of _______.
attack simulation campaigns
user mailboxes
compliance policies
network firewalls
What is the responsibility of an Authentication Administrator?
Can access to view, set and reset authentication method information for any non-admin user.
Can create and manage the authentication methods policy, tenant-wide MFA settings, password protection policy, and verifiable credentials.
Can manage all aspects of the Azure Information Protection product.
Can manage all aspects of the Cloud App Security product.
Fill in the blank: An Authentication Policy Administrator can create and manage the authentication methods policy, tenant-wide MFA settings, password protection policy, and _______.
verifiable credentials
device compliance policies
network security groups
user mailbox settings
What happens when a user is assigned the Azure AD Joined Device Local Administrator role?
Users assigned to this role are added to the local administrators group on Azure AD-joined devices.
Can manage Azure DevOps organization policy and settings.
Can manage all aspects of the Cloud App Security product.
Can create and manage trust framework policies in the Identity Experience Framework (IEF).
Fill in the blank: An Azure DevOps Administrator can manage Azure DevOps organization _______.
policy and settings
user passwords
virtual machines
network firewalls
What is the main responsibility of an Azure Information Protection Administrator?
Can manage all aspects of the Azure Information Protection product.
Can perform common billing related tasks like updating payment information.
Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).
Can create attack payloads that an administrator can initiate later.
Fill in the blank: A B2C IEF Keyset Administrator can manage secrets for federation and encryption in the _______.
Identity Experience Framework (IEF)
Azure Active Directory Domain Services
Microsoft Intune
Azure Key Vault
What can a B2C IEF Policy Administrator do?
Can create and manage trust framework policies in the Identity Experience Framework (IEF).
Can manage all aspects of the Cloud App Security product.
Can create and manage all aspects of attack simulation campaigns.
Can manage Azure DevOps organization policy and settings.
Fill in the blank: A Billing Administrator can perform common billing related tasks like _______.
updating payment information
resetting user passwords
configuring network firewalls
installing software updates
What is the responsibility of a Cloud App Security Administrator?
Can manage all aspects of the Cloud App Security product.
Can manage all aspects of the Azure Information Protection product.
Can create and manage trust framework policies in the Identity Experience Framework (IEF).
Can create attack payloads that an administrator can initiate later.
Fill in the blank: A Cloud Application Administrator can _______.
manage all aspects of cloud applications
only view application logs
create hardware infrastructure
access user personal data
Which administrator role has limited access to manage devices in Azure AD?
Cloud Device Administrator
Global Administrator
User Administrator
Application Administrator
What is the main responsibility of a Compliance Administrator?
Can read and manage compliance configuration and reports in Azure AD and Microsoft 365.
Can manage domain names in cloud and on-premises.
Can approve Microsoft support requests to access customer organizational data.
Can create and manage all aspects of app registrations and enterprise apps except App Proxy.
Fill in the blank: The ________ can manage Conditional Access capabilities.
Conditional Access Administrator
Global Reader
User Administrator
Billing Administrator
Who can approve Microsoft support requests to access customer organizational data?
Customer LockBox Access Approver
Microsoft Account Manager
Azure Security Officer
IT Helpdesk Technician
Which administrator can access and manage Desktop management tools and services?
Desktop Analytics Administrator
Network Administrator
Security Administrator
Exchange Administrator
Directory Readers can read basic directory information.
True
False
Which administrator role is only used by Azure AD Connect service?
Directory Synchronization Accounts
Global Administrator
User Administrator
Password Administrator
Who can read and write basic directory information, for granting access to applications, not intended for users?
Directory Writers
Application Readers
User Managers
Security Auditors
Which administrator can manage domain names in cloud and on-premises?
Domain Name Administrator
Network Administrator
Database Administrator
Security Administrator
The Dynamics 365 Administrator can manage all aspects of the Dynamics 365 product.
True
False
Who can manage all aspects of the Exchange product?
Exchange Administrator
Exchange User
Exchange Auditor
Exchange Support Staff
Which administrator can create or update Exchange Online recipients within the Exchange Online organization?
Exchange Recipient Administrator
Exchange Compliance Administrator
Exchange Service Administrator
Exchange Records Administrator
Who can create and manage all aspects of user flows?
External ID User Flow Administrator
External ID User Flow User
External ID User Flow Viewer
External ID User Flow Contributor
Fill in the blank: The ________ can create and manage the attribute schema available to all user flows.
External ID User Flow Attribute Administrator
User Flow Policy Editor
Directory Reader
Application Owner
Who is responsible for managing external identity providers?
External Identity Provider Administrator
Network Security Analyst
Database Manager
Application Developer
Which Azure AD role can manage all aspects of Azure AD and Microsoft services that use Azure AD identities?
Global Administrator
User Administrator
Security Reader
Billing Administrator
Which Azure AD role can read everything that a Global Administrator can, but not update anything?
Global Reader
User Administrator
Security Reader
Application Administrator
Which Azure AD role allows members to create/manage groups, create/manage group settings like naming and expiration policies, and view groups activity and audit reports?
Groups Administrator
User Administrator
Global Reader
Security Administrator
Which Azure AD role can invite guest users independent of the 'members can invite guests' setting?
Guest Inviter
User Administrator
Global Reader
Security Reader
Which Azure AD role can reset passwords for non-administrators and Helpdesk Administrators?
Helpdesk Administrator
User Administrator
Global Reader
Security Reader
Which Azure AD role can manage AD to Azure AD cloud provisioning, Azure AD Connect, and federation settings?
Hybrid Identity Administrator
Global Reader
User Administrator
Security Reader
Which Azure AD role manages access using Azure AD for identity governance scenarios?
Identity Governance Administrator
Global Reader
Billing Administrator
User Administrator
Which Azure AD role has administrative access in the Microsoft 365 Insights app?
Insights Administrator
User Administrator
Global Reader
Security Reader
Which Azure AD role can view and share dashboards and insights via the M365 Insights app?
Insights Business Leader
Global Reader
User Administrator
Security Reader
Which Azure AD role can manage all aspects of the Intune product?
Intune Administrator
User Administrator
Global Reader
Security Reader
Which Azure AD role can manage settings for Microsoft Kaizala?
Kaizala Administrator
User Administrator
Global Reader
Security Reader
Which Azure AD role can configure knowledge, learning, and other intelligent features?
Knowledge Administrator
User Administrator
Security Reader
Application Developer
Which Azure AD role can organize, create, manage, and promote topics and knowledge?
Knowledge Manager
User Administrator
Security Reader
Application Developer
Which Azure AD role can manage product licenses on users and groups?
License Administrator
User Administrator
Global Reader
Security Reader
Which Microsoft 365 role can read security messages and updates in Office 365 Message Center only?
Message Center Privacy Reader
Global Administrator
Compliance Administrator
Service Support Administrator
Which Microsoft 365 role can read messages and updates for their organization in Office 365 Message Center only?
Message Center Reader
Global Administrator
Billing Administrator
User Management Administrator
Which Microsoft 365 role can manage commercial purchases for a company, department or team?
Modern Commerce User
Global Reader
Service Support Admin
Reports Reader
Which Microsoft 365 role can manage network locations and review enterprise network design insights for Microsoft 365 Software as a Service applications?
Network Administrator
Compliance Administrator
Billing Administrator
Service Support Administrator
Which Microsoft 365 role can manage Office apps cloud services, including policy and settings management, and manage the ability to select, unselect and publish 'what's new' feature content to end-user's devices?
Office Apps Administrator
Global Reader
Teams Communications Support Specialist
Exchange Recipient Administrator
Which Microsoft 365 role is not intended for general use and should not be used?
Partner Tier1 Support
Global Administrator
User Management Administrator
Billing Administrator
Which Microsoft 365 role is not intended for general use and should not be used?
Partner Tier2 Support
Global Administrator
User Management Administrator
Billing Administrator
Which Microsoft 365 role can reset passwords for non-administrators and Password Administrators?
Password Administrator
Global Reader
Billing Administrator
Service Support Administrator
Which Microsoft 365 role can manage all aspects of the Power BI product?
Power BI Administrator
SharePoint Administrator
Teams Administrator
Exchange Administrator
Which Microsoft 365 role can create and manage all aspects of Microsoft Dynamics 365, PowerApps and Microsoft Flow?
Power Platform Administrator
Exchange Administrator
SharePoint Administrator
Teams Administrator
Which Microsoft 365 role can manage all aspects of printers and printer connectors?
Printer Administrator
Global Reader
Message Center Reader
Compliance Administrator
Which Microsoft 365 role can register and unregister printers and update printer status?
Printer Technician
Global Administrator
User Administrator
Device Manager
Which Microsoft 365 role can access to view, set and reset authentication method information for any user (admin or non-admin)?
Privileged Authentication Administrator
Global Reader
User Administrator
Security Reader
Which Microsoft 365 role can manage role assignments in Azure AD, and all aspects of Privileged Identity Management?
Privileged Role Administrator
Global Reader
User Administrator
Security Reader
Which Microsoft 365 role is responsible for reading reports?
Reports Reader
Global Administrator
User Administrator
Billing Administrator
Which Microsoft 365 role can create and manage all aspects of Microsoft Search settings?
Search Administrator
Global Reader
User Administrator
Compliance Administrator
Which Microsoft 365 role can create and manage the editorial content such as bookmarks, Q and As, locations, floorplan?
Search Editor
Global Reader
Teams Administrator
Billing Administrator
Which Microsoft 365 role can create security information and reports, and manage configuration in Azure AD and Office 365?
Security Administrator
Global Reader
Billing Administrator
User Administrator
Which Microsoft 365 role creates and manages security events?
Security Operator
Global Administrator
Billing Administrator
User Administrator
Which Microsoft 365 role can read security information and reports in Azure AD and Office 365?
Security Reader
Global Administrator
User Administrator
Billing Administrator
Which Microsoft 365 role can read service health information and manage support tickets?
Service Support Administrator
Global Reader
Billing Administrator
User Management Administrator
Which Microsoft 365 role can manage all aspects of the SharePoint service?
SharePoint Administrator
Teams Administrator
Exchange Administrator
Compliance Administrator
Which Microsoft 365 role can manage all aspects of the Skype for Business product?
Skype for Business Administrator
Teams Communications Support Specialist
Exchange Administrator
SharePoint Administrator
Which Microsoft 365 role can manage the Microsoft Teams service?
Teams Administrator
Exchange Administrator
SharePoint Administrator
Security Administrator
Which Microsoft 365 role can manage calling and meetings features within the Microsoft Teams service?
Teams Communications Administrator
Teams Service Administrator
Global Reader
SharePoint Administrator
Which Microsoft 365 role can troubleshoot communications issues within Teams using advanced tools?
Teams Communications Support Engineer
Teams Administrator
Teams Communications User
Teams Device Manager
Which Microsoft 365 role can troubleshoot communications issues within Teams using basic tools?
Teams Communications Support Specialist
Teams Administrator
Global Reader
Exchange Online Support Specialist
Which Microsoft 365 role can perform management related tasks on Teams certified devices?
Teams Devices Administrator
SharePoint Administrator
Exchange Administrator
Security Reader
Which Microsoft 365 role can see only tenant level aggregates in Microsoft 365 Usage Analytics and Productivity Score?
Usage Summary Reports Reader
Global Administrator
Service Support Admin
Billing Administrator
Which Microsoft 365 role can manage all aspects of users and groups, including resetting passwords for limited admins?
User Administrator
Billing Administrator
Service Support Administrator
Reports Reader
What is the responsibility of a Windows Update Deployment Administrator?
Create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service.
Monitor network traffic for suspicious activity.
Manage user access to shared folders on the network.
Configure printer settings for all users in the organization.
