We are probably one of the early adopters of Viva Learning, but as of today, the tool is totally unusable and potentially a security risk if we have to follow Microsoft's guidelines.
To be able to manage Viva Learning content, you must have an admin role. So far, so good. The problem is that the level of permissions that is required to manage things like Academies or Learning Paths is way beyond what would be considered reasonable.
If we go into detail, and excluding roles we would never assign to users like Global Admin, we only have two choices: Knowledge Administrator and Knowledge Manager. The permissions that both roles have are available on online articles and resources, HOWEVER: both roles have the ability to create links to users OneDrives from the Admin Center, browse content and delete content! Why should someone responsible for Academies have that level of access?
We opened a service request with Microsoft but so far they have only managed to confirm that these are the two (lowest possible) roles that allow a user to administer Learning Paths and Academies, and that theses roles are not customisable!
What are we missing here? Is this really how the tool is meant to operate, or does the Microsoft support not have sufficient knowledge to support Viva Learning and recommend solutions?