Does Entra Role "Organizational Branding Administrator" work?

Question

I see Organizational Branding Administrator role in Roles and Administrators. The role description says "Manage all aspects of organizational branding in a tenant."

However, I have that role but it does not enable the save buttons so I cannot make changes.

Is that role supposed to work for Organization Branding editing? If not, what is the purpose?

Answer 1

@Keennon, Mike

Thank you for posting this in Microsoft Q&A.

As per our public documentation of Azure AD, there is no role by name "Organizational Branding Administrator".

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference

To configure your company branding you will need to have "Global administrator" role assigned to user account.

https://learn.microsoft.com/en-us/entra/fundamentals/how-to-customize-branding#prerequisites

Specific permission required to configure branding is, "microsoft.directory/loginOrganizationBranding/allProperties/allTasks"

Currently this permission is not listed to get it added in custom role creation. This is user base role and currently we only have below permission that can be defined for user in custom role,

You can submit feedback in Azure feedback portal to get this permission added in custom permissions.

https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

@Keennon, Mike

The Organizational Branding Administrator role is now available and will allow you to make changes to your branding configuration. Its functionality is limited to branding configuration. The documentation at https://learn.microsoft.com/en-us/entra/fundamentals/how-to-customize-branding has been updated to reflect the new role.