Which Teams Role Enables Reading Activity Reports with Least Privilege?

MS-700 By islever Editorial Last updated Sep 26, 2026

Monitor and report on Teams

Short answer

D Teams Communications Support Engineer grants read access to activity reports with the least privilege among the eligible roles.

Question

Your company uses Teams. You are assigned the Teams Communications Support Specialist role. You discover that you cannot read activity reports in the Microsoft 365 admin center. You need to be assigned a role that will enable you to read the activity reports. The solution must follow the principle of least privilege. Which role should be assigned to you?

Teams Administrator
Global Administrator
Teams Communications Administrator
Teams Communications Support Engineer Correct Answer

Key Takeaways

The exam tests the capability differences between Teams Communications roles; the trap is assuming a higher Teams admin or Global Administrator role is required when a lower-privileged role already provides read access.

The Teams Communications Support Specialist role cannot read activity reports, so you need a role that grants that access with least privilege. This page establishes that the Teams Communications Support Engineer role is the correct choice for MS-700.

Common mistake: Many candidates choose Teams Communications Administrator because it sounds more authoritative, but it grants additional management permissions beyond reading reports, violating least privilege.

Expert Analysis

Why the Answer Is Correct

Teams Communications Support Engineer is the lowest-privileged role that can read activity reports in the Microsoft 365 admin center. The Teams Communications Support Specialist role, which the user already has, lacks this capability. The Engineer role adds only the necessary read access for troubleshooting and reporting, so it perfectly aligns with the principle of least privilege. This is confirmed by the official Teams admin roles documentation that lists activity report viewing as a specific capability of the Support Engineer role.

Why the Other Options Are Wrong

Teams Administrator (A) can read reports but also manages teams, meetings, and apps, which is far beyond the required read access. Global Administrator (B) is the most powerful role and would grant unnecessary control over the entire tenant. Teams Communications Administrator (C) can manage calling and meeting features, so it is more privileged than Support Engineer and thus not the least-privilege choice.

Community Comment Notes

BhavyaSangam noted that the Engineer role "provides access to activity reports without granting excessive permissions" and aligns with least privilege. VitaliiKurishko linked to the official using-admin-roles doc to support this choice. Some learners like razit and b466dd6 argued for Teams Communications Administrator by citing the activity-reports "Who can see reports" section, but that role exceeds the required access level.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Memorize the Teams admin role capability matrix, especially the differences between Communications Support Specialist, Support Engineer, and Communications Administrator. When a question mentions least privilege, always pick the lowest-privileged role that still has the required read permission.

Frequently Asked Questions

Why isn't Teams Communications Administrator the least-privilege choice for reading activity reports?

Because it also manages calling and meeting features, which exceeds the read-only requirement, whereas Support Engineer only adds report access.

Can a Teams Communications Support Specialist ever read activity reports?

No, that role is limited to the Call Quality Dashboard and cannot access activity reports in the Microsoft 365 admin center.

More MS-700 FAQ →

Community Votes

50%

50% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

BhavyaSangam 👍 1 Answered D

Assigning the Teams Communications Support Engineer role is the correct choice because it provides access to activity reports without granting excessive permissions. This aligns with the principle of least privilege.
b466dd6 👍 1 Answered C

C is correct. https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide#who-can-see-reports
razit 👍 1 Answered C

C https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide
VitaliiKurishko 👍 1 Answered D

https://learn.microsoft.com/en-us/microsoftteams/using-admin-roles

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All MS-700 Questions

Access 88 questions with complete answers and detailed explanations.

View Full MS-700 Practice Test →

← Back to MS-700 Study Guide