SharePoint Online Governance: Key Interview Questions

Hi All,

Greetings for the day!!!

On Microsoft 365 Junction, we have started the basic interview questions. These include answers about Azure, SharePoint, M365, Power Platform, Teams, and so on.

In this article we are discussing SharePoint online governance preparation question. I will keep updating this list.

Q1. How I can get the total number of Global Administrators in my tenant? Who are the users who have “Global Administrator” role assigned?

• For detailed steps, please refer the article – Microsoft 365 Governance – Get all admins in a tenant – https://knowledge-junction.in/2024/12/01/m-365-governance-know-admins-in-tenant/
• To know all the “Global Administrators” in my tenant, using Microsoft Graph PowerShell, please refer article. Microsoft 365 : Microsoft Graph PowerShell tutorial – Part 4 – Implementing Governance – Fetching all Global Administrators in tenant – https://knowledge-junction.in/2024/01/23/microsoft-365-microsoft-graph-powershell-tutorial-part-4/

Q2. Who can reset the “Global Administrator” password?

• Another global administrator
• Privileged Authentication Admin

Q3. What operation “Privileged Authentication Admin” can do?

• Reset passwords for all users.
• View most settings in the Microsoft 365 admin center.
• Force users to sign out by invalidating refresh tokens.
• Update non-password authentication, like MFA, for all users including global admins.
• Monitor service health.
• Create and manage service requests.

Q4. How to export all the users those have some roles assigned?

• For detailed steps, please refer the article – Exporting Microsoft 365 Admin Roles: A Step-by-Step Guide – https://knowledge-junction.in/2024/12/02/exporting-microsoft-365-admin-roles-a-step-by-step-guide/

Q5. How to export all directory roles in my tenant to a CSV file?

$Roles = Get-MgDirectoryRole -All
$Roles = $Roles | Select-Object DisplayName, Description, RoleTemplateId | Export-Csv -Path "C:\DirectoryRoles.csv" -NoTypeInformation

Q6. How to filter directory roles based on their display name?

• We can filter directory roles using Where-Object.

$Roles = Get-MgDirectoryRole -All
$GlobalAdministrators= $Roles | Where-Object { $_.DisplayName -eq "Global Administrator" }

REFERENCES

• SharePoint online – Interview preparation – https://knowledge-junction.in/2024/11/10/sharepoint-online-interview-preparation/
• Microsoft 365 Governance – Get all admins in a tenant – https://knowledge-junction.in/2024/12/01/m-365-governance-know-admins-in-tenant/
• Microsoft 365 : Microsoft Graph PowerShell tutorial – Part 4 – Implementing Governance – Fetching all Global Administrators in tenant – https://knowledge-junction.in/2024/01/23/microsoft-365-microsoft-graph-powershell-tutorial-part-4/
• Exporting Microsoft 365 Admin Roles: A Step-by-Step Guide – https://knowledge-junction.in/2024/12/02/exporting-microsoft-365-admin-roles-a-step-by-step-guide/
• Microsoft Graph PowerShell tutorial – https://knowledge-junction.in/category/technology-articles/m365/microsoft-graph/microsoft-graph-powershell/
• Graph Explorer / Interview preparation / M365 / Microsoft Graph / Microsoft Graph PowerShell / Small Tricks and Tips
• Microsoft Graph – Interview question – https://knowledge-junction.in/2024/04/21/microsoft-graph-interview-question/
• Microsoft 365 – Microsoft Graph PowerShell – way to go now – https://knowledge-junction.in/2024/01/25/microsoft-365-microsoft-graph-powershell-way-to-go-now/

Thank you 🙂 Have a nice time ahead 🙂