To streamline security operations and improve threat protection, detection, and response capabilities you want to implement Microsoft Graph Security API. You will be calling the Microsoft Graph Security API from Graph Explorer. The global admin in your tenant has granted consent for the requested permissions to the Graph Explorer application. What role must you be assigned? The solution must use the principle of least privilege.

Answer options:

A.Security Administrator
B.Reports Reader
C.Directory Reader
D.Security Reader

Correct Answer: D 
Microsoft Graph Security API requires users to be assigned the Azure AD Security Reader role. 

Option A is incorrect. This will grant you permission but is not the least privileged solution.
Option B is incorrect. Reports Readers can read sign-in and audit reports.
Option C is incorrect. Directory Readers can read basic directory information. Commonly used to grant directory read access to applications and guests.
Reference: 
To know more about Microsoft Security Graph API Authorization, please refer to the link below: 

https://docs.microsoft.com/en-us/graph/security-authorization