Introduction

This text describes the different administration roles in Microsoft Entra and other services. It helps you understand who manages each part of the system.

---

1. Microsoft Entra Specific Roles

These roles only manage identity and access in Microsoft Entra ID. They do not manage specific service settings.

• Application Administrator: This role manages application registrations and enterprise applications.
• User Administrator: This role creates, deletes, and updates user accounts.
• Group Administrator: This role creates and manages security groups and Microsoft 365 groups.
• Authentication Administrator: This role configures and resets authentication methods for users.

---

2. Interservices Roles (Cross-Service)

These roles work across many different security portals at the same time.

• Security Administrator: This role manages security policies and permissions across Microsoft Entra, Security Center, and Microsoft Defender for Cloud.

---

3. Service-Specific Roles

These roles only manage the settings inside one specific application or service.

• Exchange Administrator: This role manages email mailboxes, transport rules, and anti-spam settings in Exchange Online.
• Teams Administrator: This role manages the Microsoft Teams service, chat policies, and voice settings.
• Teams Device Administrator: This role configures and manages hardware devices for Microsoft Teams rooms.
• Teams Communications Administrator: This role manages calling features and meeting quality tools.
• Intune Administrator: This role manages mobile devices, application deployments, and device compliance policies.