Can't see all configurations as a Global Reader

Question

The role description of the Global Reader role says:
Can read everything that a Global Administrator can, but not update anything.

In my case this isn't true. Example: When I open the Teams Admin Center the "Teams Apps" tab is missing. I can see the tab using the Teams Administrator role.

Same situation in the Defender Admin center. I can't see any configuration there.

In my opinion the Global Reader role should see the exact same config as the Global Admin role with the only difference read-only.

Answer 1

Hi @Daniel Ernst

Based on your description, as a global reader you cannot see the "Team Apps" tab in the Team Admin Center and cannot see any configuration in the Defender Admin Center. This is due to Microsoft's design.

According to the documentation, users with the global reader role cannot perform the following operations:

These limitations are in place to ensure that only specific roles with the necessary permissions can access and modify certain sensitive information. If you need access to these features, you might need to be assigned a different role such as Teams Administrator for Teams Admin Center or a specific role for Defender Admin Center.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---