Depends on what tasks you want this account to be able to perform. Read here for detailed description on all the available roles: https://learn.microsoft.com/en-gb/azure/active-directory/roles/permissions-reference
Admin role without billing information access
The Global Administrator role gives access to pretty much every aspect. Instead, I want to give a user admin access but with no billing access. Is there a predefined role for that?
Also what are the most common roles below Global Administrator?
2 answers
Sort by: Most helpful
-
-
JamesTran-MSFT 36,796 Reputation points Microsoft Employee
2021-10-27T21:32:27.217+00:00 @Omer
Thank you for your post!From the documentation that @Vasil Michev linked, you should be able to assign the User Administrator role to your user. This role doesn't have billing access because it isn't allotted the
microsoft.commerce.billing/allEntities/allTasks
action, to manage all aspects of Office 365 billing. If you'd like more control over billing, you can also leverage our Create and assign a custom role in Azure Active Directory documentation to copy the User Admin role and remove any actions that you don't want your user to have.When it comes to the most common roles below Global Admin I don't believe there's a list for this. But in order to better answer your question can you share some more details regarding what you're trying to do? Or what you mean by common roles?
Additional Links:
Azure AD built-in roles
Billing Administrator Azure AD Role
User Administrator Azure AD RoleIf you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.