Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Overview
This document provides a comprehensive list of Microsoft Entra built-in roles that grant tenant-level administrative access in Azure. This information is useful if you're an administrator who manages access and permissions across tenants.
For descriptions of each role, see Microsoft Entra built-in roles. Each role is linked to its description and permissions, helping you understand what access and capabilities each role provides.
| Role |
|---|
| Application Administrator |
| Authentication Administrator |
| Authentication Policy Administrator |
| Azure Information Protection Administrator |
| B2C IEF Keyset Administrator |
| B2C IEF Policy Administrator |
| Billing Administrator |
| Cloud App Security Administrator |
| Cloud Application Administrator |
| Cloud Device Administrator |
| Compliance Administrator |
| Compliance Data Administrator |
| Conditional Access Administrator |
| Customer LockBox Access Approver |
| Desktop Analytics Administrator |
| Directory Reviewer |
| Domain Name Administrator |
| Dynamics 365 Administrator |
| Exchange Administrator |
| Exchange Recipient Administrator |
| External ID User Flow Administrator |
| External ID User Flow Attribute Administrator |
| External Identity Provider Administrator |
| Global Administrator |
| Global Reader |
| Groups Administrator |
| Helpdesk Administrator |
| Hybrid Identity Administrator |
| Identity Governance Administrator |
| Insights Administrator |
| Intune Administrator |
| Kaizala Administrator |
| Knowledge Administrator |
| License Administrator |
| Message Center Privacy Reader |
| Message Center Reader |
| Network Administrator |
| Office Apps Administrator |
| Password Administrator |
| Power BI Administrator |
| Power Platform Administrator |
| Privileged Authentication Administrator |
| Privileged Role Administrator |
| Reports Reader |
| Search Administrator |
| Security Administrator |
| Security Operator |
| Security Reader |
| Service Support Administrator |
| SharePoint Administrator |
| Skype for Business Administrator |
| Teams Administrator |
| Teams Communications Administrator |
| Teams Communications Support Engineer |
| Teams Communications Support Specialist |
| Teams Devices Administrator |
| User Administrator |