Which option represents the default permission set given to users who review configurations?

• A. Group Administrator
• B. Group Reviewer
• C. Global Viewer
• D. Compliance Auditor

Answer: (B)

In ePO, who can do what is controlled by permission sets, which define what a user can view or modify. For someone whose job is to examine configurations, you want a role that lets them see the details without making changes.

The Group Reviewer permission set is designed for that purpose: it provides read-only access to configuration data within the group, letting the user review settings, policies, and reports without the ability to edit anything. This aligns with the need to verify configurations while maintaining security through restricted privileges.

Grouping and scope matter here. A Group Administrator would grant full control to manage configurations, which isn’t appropriate for a reviewer. A Global Viewer offers read-only access across the entire environment, which is broader than what’s needed for group-specific review. A Compliance Auditor focuses on compliance-related access and reporting, which may not cover general configuration review. Therefore, Group Reviewer is the best fit for users who need to review configurations.