Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
ChatGPT o3: Assign the following two roles to Admin1: Helpdesk Administrator Allows viewing BitLocker recovery keys for Azure AD–joined Windows devices. This role can read BitLocker recovery keys for any Azure AD‑joined Windows device but cannot manage or delete devices. Using Cloud Device Administrator would also work, but it grants broader device‑management permissions, so Helpdesk Administrator is the safer minimum. License Administrator Allows setting the "Usage location" attribute for users (required for assigning licenses). License Administrators can assign, remove, and manage product licenses, which includes setting or changing the Usage location property required for license assignment. No broader user‑admin rights are needed. These roles satisfy the requirements using the principle of least privilege.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
-HelpDesk admin (less permissions than Cloud Device admin) -License admin https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-device-administrator
the minimal combo that satisfies both tasks is: Cloud Device Administrator – view BitLocker keys License Administrator – edit usage location
ChatGPT o3: Assign the following two roles to Admin1: Helpdesk Administrator Allows viewing BitLocker recovery keys for Azure AD–joined Windows devices. This role can read BitLocker recovery keys for any Azure AD‑joined Windows device but cannot manage or delete devices. Using Cloud Device Administrator would also work, but it grants broader device‑management permissions, so Helpdesk Administrator is the safer minimum. License Administrator Allows setting the "Usage location" attribute for users (required for assigning licenses). License Administrators can assign, remove, and manage product licenses, which includes setting or changing the Usage location property required for license assignment. No broader user‑admin rights are needed. These roles satisfy the requirements using the principle of least privilege.