Learning outcomes
- Explain how to use groups and least-privilege roles appropriately.
- Complete the guided practice safely.
- Check that you can choose the smallest role needed for a sample task.
Administration and Security
Groups and Administrator Roles
Learn to use groups and least-privilege roles appropriately and choose the smallest role needed for a sample task in this beginner-friendly Microsoft 365 lesson.
Before you begin
Administrator permissions may be required. Use least privilege, a separate admin account and an approved change record.
Step-by-step instructions
- Open the Microsoft 365 admin centre or relevant security portal and confirm you are using the intended account.
- Compare a Microsoft 365 group with an admin role assignment.
- Pause and check permissions, filenames, recipients, dates or settings that affect the task.
- Test the result: choose the smallest role needed for a sample task.
- Record the change, owner, date, expected effect and rollback plan, then verify the result with the affected user.
Ian's practical tip: Use sample information first. Once the workflow is correct, repeat it with approved work information and the minimum necessary access.
Practical activity
Compare a Microsoft 365 group with an admin role assignment. Your expected result is to choose the smallest role needed for a sample task.