Azure AD – New administration role available to delegate administration of Microsoft Cloud App Security (MCAS)
As you know, Azure AD comes with administration roles to allow you delegate administration tasks with the least privilege.
In the way to limit the need and use of the global administrator role, 3 new administration roles have been made available:
- Groups administrator to delegate groups (Azure AD security groups, Office 365 Groups, Teams or Yammer) management, covering naming convention, expiration policy or even AAD security group restoration
- Office apps administrator allows you delegating Office apps settings like policies (Office Cloud Policy Service – https://aka.ms/o365clientmgmt), self-service download settings or also the ‘What’s new content’ (currently in preview). This role also grants permission for managing support request and service health access
- Power platform administrator used to delegate Power Platform (Dynamics 365, Flow, PowerApps) all administration tasks
These roles are available from both Azure (https://portal.azure.com/), Azure Active Directory (https://aad.portal.azure.com/) or Office 365 Administration (https://admin.microsoft.com/) portals
