You have a Microsoft 365 subscription that contains a user named User1.
You need to assign User1 permissions to search Microsoft Office 365 audit logs.
What should you use?
You have a Microsoft 365 subscription that contains a user named User1.
You need to assign User1 permissions to search Microsoft Office 365 audit logs.
What should you use?
To assign permissions to search Microsoft Office 365 audit logs, you should use the Microsoft Purview compliance portal. This is because the compliance portal is the designated tool for managing and searching audit logs in Microsoft 365, providing a centralized place for compliance-related tasks including audit log searches.
Just a little headsup for 2024: "Managing Audit permissions from the Exchange admin center will be discontinued starting February 2, 2024. You should start using the compliance portal now to manage Audit permissions and familiarize yourselves with the new permissions controls. To minimize impact to your organization, all existing Audit permissions currently assigned in the Exchange admin center will be automatically configured in the compliance portal on February 2, 2024." https://learn.microsoft.com/en-us/purview/audit-standard-setup
Which means that B is the answer
Managing Audit permissions from the Exchange admin center will be discontinued starting February 2, 2024. You should start using the compliance portal now to manage Audit permissions and familiarize yourselves with the new permissions controls. To minimize impact to your organization, all existing Audit permissions currently assigned in the Exchange admin center will be automatically configured in the compliance portal on February 2, 2024." https://learn.microsoft.com/en-us/purview/audit-standard-setup
To search the audit log, administrators and members of investigation teams must be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online.
https://learn.microsoft.com/en-us/purview/audit-get-started#step-2-assign-permissions-to-search-the-audit-log