Which roles can view a user's authentication method details?

Question

If you use SSPR and MFA, your users may need to register additional authentication methods. The methods can be viewed by a Global Administrator, but normal users are denied access to these information.

I know for a fact that there is at least one other role that grants access to these sensitive and personal information. I cannot find the documentation that explains what roles are granted access. I would appreciate some help finding the pages where this is documented. Thank you!

Answer 1

Hi@Daniel Niccoli

Thank you for posting this in Microsoft Q&A.

I understand that you are interested in knowing which roles can view a user's authentication method details.

In addition to the Global administrator Privileged Authentication Administrator and Authentication Administrator roles, these roles allow for the access of sensitive and personal information. These two roles have permissions to Manage user's auth methods.
Note: User Administrator role can view user's sensitive data in older authentication method experience not in newer authentication method. Can't manage user's auth methods except reset password.

Please refer below documents:
Authentication Methods
Who can perform sensitive actions

Hope this helps. Do let us know if you any further queries.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thanks,
Navya.