Least-privilege admin role for M365 tenant tasks
This sheet compares Minimum role, Over-broad pick to avoid.
| Criterion | Minimum role | Over-broad pick to avoid |
|---|---|---|
| Add, modify or remove a custom domain | Domain Name Administrator | Global Administrator |
The verdict, the full comparison, 5 rules and 3 traps are part of MS-102 access. Unlock MS-102.