Admin Roles

Question 1

What is a Global admin?

Answer 1

○ Administrator of all Office 365 tenant
○ First account that’s created
○ You should keep a onmicrosoft.com account as global administrator even if you move over your domain that way you have a backup with the same level of authority.
○ Access all administrative features in O365

Question 2

What is a Billing admin?

Answer 2

Purchases
Manges subscription
Handles the billing
Support tickets
Monitor Service health

Question 3

What is a Password Admin (help desk)?

Answer 3

Reset passwords for users
Manages support tickets
Monitors service health

Question 4

What is a service admin?

Answer 4

Open support requests and view service dashboard
See if there’s any problem within O365 (health status)
View change and relase notifications
§ With the exception of support tickets these are all view only settings.

Question 5

What is a Exchange admin?

Answer 5

§ Manages mailboxes and anti-spam for business, O365 groups and view activity reports.

Question 6

What is a SharePoint admin?

Answer 6

Manages documents storage, assign site collection and term store admins

Question 7

What is a SFB admin?

Answer 7

§ Manages and configures Skype for Business, views all activity reports

Question 8

What is a Dynamics 365 service admin?

Answer 8

○ Manages Dynamics 365 at tenant level, cannot perform functions of Global admin.

Question 9

What is a User management admin?

Answer 9

Resets passwords, monitors health, adds/ deletes users, manages support tickets.
Manage and create non-admin users and groups

Question 10

What is a Security Administrator? (Security and Compliance)

Answer 10

Members have permission to manage security-related features like Security Reader + DLP Compliance Management, Device Management and Audit Logs.
○ Microsoft 365 security center,
○ Identity Protection
○ Privileged Identity Management, as well as the ability to read Azure AD sign-in reports and Audit logs,
○ O365 Security and Compliance Center.
○ Difference between Security Admin and Reader Admin has the ability to edit and manage reader only has view only access.

Question 11

What is the reviewer role? (Security and Compliance)

Answer 11

Use a limited set of the analysis features in Office 365 Advanced eDiscovery. Members of this group can see only the documents that are assigned to them

Question 12

What is the record management role?(Security and Compliance)

Answer 12

Members of this management role group have permissions to manage and dispose record content.

Question 13

What is the organisation management role? (Security and Compliance)

Answer 13

Members of this management role group have permissions to manage Exchange objects and their properties in the Exchange organization. Members can also delegate role groups and management roles in the organization. This role group shouldn’t be deleted.

Question 14

What is the supervisory review role? (Security and Compliance)

Answer 14

Members can Control policies and permissions for reviewing employee communications.

Question 15

What is a compliance Administrator? (Security and Compliance)

Answer 15

Members can Manage settings for device management, data loss prevention, reports, and preservation.
View and edit settings and reports for compliance features.

Question 16

What is a customer Lockbox Access approver? (Security and Compliance)

Answer 16

○ Ensures that no one from Microsoft can access customer content to perform service operation without the customers explicit approval.
○ This allows support engineers from Microsoft to login to your enciroment fix any issues that may be present.
○ All actions the engineer takes is logged.
○ Included in E5 plan can be enabled for a price on other plans.