Q: 1
You have a Microsoft J65 E5 subscription that contains a user named User1.
All users are assigned Microsoft 365 Copilot licenses.
You deploy Microsoft Purview Data Security Posture Management for Al (DSPM for Al).
You need to ensure that User1 can analyze prompts and responses for Al interaction events. The
solution must follow the principle of least privilege.
To which two role groups should you add User1? Each correct answer presents part of the solution.
NOTE; Each correct selection is worth one point.
Options
Discussion
Probably C and E here since those two roles let User1 view and drill into the actual content in Content Explorer without giving more than necessary. Least privilege is key for Purview, so not seeing a need for A or D. Anyone see an angle I missed?
C/E. Both are needed for full access to prompt contents in Content Explorer. Not 100 percent but that's consistent with least privilege.
C and E tbh
Seriously wish they'd make these Purview roles easier to remember. C and E.
C and E tbh, not B. Security Reader is tempting but it can't see actual prompt contents, while Content Explorer roles do exactly that. Happened to see this mix up in other practice sets too.
I remember a similar scenario from labs in exam reports and it was C and E.
C and E tbh. Those two roles together let User1 see both the list of events and the actual contents, which is what you need for analyzing prompts and responses. Security Reader (B) is a bit of a trap here because it just gives visibility, not content access. Let me know if someone thinks D makes more sense?
Makes sense to pick C and E here. Only those Content Explorer roles allow viewing both the list and actual data for AI interactions, which is what "analyze prompts and responses" needs. Official docs and MS Learn modules on Purview permissions support this, but if someone has a different take from hands-on labs let me know.
A is wrong, B. Security Reader should let User1 see security events, which feels close for analysis tasks even though it's not as granular as Content Explorer. Not 100% sure since Purview roles can be confusing sometimes.
For User1 to review prompts and responses in Purview without extra permissions, I'm thinking C and E are exactly what's needed. Those roles let you see the list of items and open their contents, following least privilege. Not totally sure if there's a hidden catch with Al-specific stuff, but everything I've seen points to these two. Anyone come across a scenario where A or D would make sense here?
Be respectful. No spam.
