Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Identity and Access Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The Security Operator has write access as said in: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task#monitoring-and-health---recommendations-least-privileged-roles
Security Operator can view Identity Secure Score improvement actions, but can't update their status. Roles that can view but not edit: Security Reader, Security Operator, Global Reader, Helpdesk Administrator, Service Support Administrator, User Administrator. Roles that can update the status: Global Administrator Security Administrator Exchange Administrator SharePoint Administrator
The trick is that Security Operator cannot update Identity Secure Score improvement actions. Microsoft's current role documentation specifically lists: - Update Identity Secure Score improvement action - Least privileged: SharePoint Administrator - Additional roles: Helpdesk Administrator, User Administrator, Security Reader, Security Operator, Global Reader Microsoft Learn However, there's an important nuance: those additional roles are not necessarily write permissions for every Secure Score operation. Microsoft's current Secure Score documentation says Security Operator has read-only access and cannot edit the status/notes of a recommended action.