Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantHard
A global administrator in a Microsoft 365 tenant wants to delegate the ability to manage user mailboxes, including creating new mailboxes, assigning licenses, and setting mailbox permissions, to a junior administrator. The junior administrator should NOT be able to manage any other Microsoft 365 services or global settings. Which built-in role should the global administrator assign to the junior administrator?
- AUser Administrator
- BGlobal Reader
- CExchange Administrator
- DHelpdesk Administrator
Show answer & explanationAnswer & explanation
Correct answer: C. Exchange Administrator
The Exchange Administrator role provides full administrative access to Exchange Online, including mailbox creation, license assignment (for Exchange features), and permissions, without granting broad access to other Microsoft 365 services or global tenant settings.
Why the other options are wrong
- A. User Administrator can manage users' properties and licenses but has limited control over mailboxes themselves.
- B. Global Reader can view all administrative settings but cannot make any changes.
- D. Helpdesk Administrator can reset passwords and perform limited user management but lacks the comprehensive mailbox management capabilities required.
Exchange Administrator Role
A built-in Microsoft 365 role that grants full administrative access to Exchange Online, allowing management of mailboxes, mail flow, public folders, and other Exchange-specific settings.
- Provides comprehensive control over Exchange Online.
- Does not grant access to other M365 services like SharePoint or Teams.
- Ideal for delegating email-specific administration.
Memory trick: Match the admin to the service's specific key.