Azure AD User Provisioning

Sab S. Salazar 66 Reputation points


Automatic User Provisioning needs a user account in Azure AD with permission to configure provisioning (Application Administrator, Cloud Application Administrator, Application Owner, or Global Administrator).
The question is, is it enough to have an Application Administrator role for user provisioning?

Thank you in advance! Hope to hear from you soon.


Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,715 questions
0 comments No comments
{count} votes

Accepted answer
  1. Saurabh Sharma 23,561 Reputation points Microsoft Employee

    Hi @Sab S. Salazar ,

    Thanks for using Microsoft Q&A !!

    Yes, Application administrator role is sufficient for user provisioning as this role can manage all aspects of enterprise applications. Please refer to Application Administrator role definitions for more details on the actions this role can perform.



    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

0 additional answers

Sort by: Most helpful