Free sampleDeploy and Manage a Microsoft 365 Tenantmedium
A new administrator wants to add the contoso.com custom domain to your Microsoft 365 tenant. Which directory role grants the minimum permissions required to add, modify, or remove a domain?
- AUser Administrator role in the Microsoft 365 admin center
- BDomain Name Administrator role in the Microsoft 365 admin center Correct
- CService Support Administrator role in the Microsoft 365 admin center
- DHelpdesk Administrator role in the Microsoft 365 admin center
Adding or removing a Microsoft 365 domain requires the Domain Name Administrator role, not generic helpdesk or user roles. Microsoft Learn explicitly requires the Domain Name Administrator role to add, modify, or remove a domain because the change affects the whole tenant. Customized administrators or regular users cannot make this change.
Why A is wrong: User Administrator manages user accounts and licenses but cannot add tenant-scoped domains.
Why B is correct: Correct. Microsoft Learn explicitly requires the Domain Name Administrator role to add, modify, or remove a domain because the change affects the whole tenant.
Why C is wrong: Service Support Administrator views service health and creates service requests, not domain configuration.
Why D is wrong: Helpdesk Administrator resets passwords and views service health but cannot manage domains.