Your organization has a Microsoft 365 tenant with Exchange Online and all mailboxes are housed in Exchange Online.
Your organization hires a new admin named John Gruber. You've been tasked with assigning John his Microsoft 365 roles. John will need to configure retention of all the mailboxes including their deleted items.
Your organization adheres to the principle of least privilege.