Which Teams Role Enables Reading Activity Reports with Least Privilege?
Your company uses Teams. You are assigned the Teams Communications Support Specialist role. You discover that you cannot read activity reports in the Microsoft 365 admin center. You need to be assigned a role that will enable you to read the activity reports. The solution must follow the principle of least privilege. Which role should be assigned to you?
Community Votes
50% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the capability differences between Teams Communications roles; the trap is assuming a higher Teams admin or Global Administrator role is required when a lower-privileged role already provides read access.
The Teams Communications Support Specialist role cannot read activity reports, so you need a role that grants that access with least privilege. This page establishes that the Teams Communications Support Engineer role is the correct choice for MS-700.
Many candidates choose Teams Communications Administrator because it sounds more authoritative, but it grants additional management permissions beyond reading reports, violating least privilege.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Teams Communications Support Engineer is the lowest-privileged role that can read activity reports in the Microsoft 365 admin center. The Teams Communications Support Specialist role, which the user already has, lacks this capability. The Engineer role adds only the necessary read access for troubleshooting and reporting, so it perfectly aligns with the principle of least privilege. This is confirmed by the official Teams admin roles documentation that lists activity report viewing as a specific capability of the Support Engineer role.Why the Other Options Are Wrong
Teams Administrator (A) can read reports but also manages teams, meetings, and apps, which is far beyond the required read access. Global Administrator (B) is the most powerful role and would grant unnecessary control over the entire tenant. Teams Communications Administrator (C) can manage calling and meeting features, so it is more privileged than Support Engineer and thus not the least-privilege choice.Community Comment Notes
BhavyaSangam noted that the Engineer role "provides access to activity reports without granting excessive permissions" and aligns with least privilege. VitaliiKurishko linked to the official using-admin-roles doc to support this choice. Some learners like razit and b466dd6 argued for Teams Communications Administrator by citing the activity-reports "Who can see reports" section, but that role exceeds the required access level.Official Reference
Exam Strategy
Memorize the Teams admin role capability matrix, especially the differences between Communications Support Specialist, Support Engineer, and Communications Administrator. When a question mentions least privilege, always pick the lowest-privileged role that still has the required read permission.
Frequently Asked Questions
Why isn't Teams Communications Administrator the least-privilege choice for reading activity reports?
Because it also manages calling and meeting features, which exceeds the read-only requirement, whereas Support Engineer only adds report access.
Can a Teams Communications Support Specialist ever read activity reports?
No, that role is limited to the Call Quality Dashboard and cannot access activity reports in the Microsoft 365 admin center.
Related Analysis
Practice All MS-700 Questions
Access 88 questions with complete answers and detailed explanations.
View Full MS-700 Practice Test →