Admin role without billing information access

Omer 1 Reputation point
2021-10-27T10:42:07.873+00:00

The Global Administrator role gives access to pretty much every aspect. Instead, I want to give a user admin access but with no billing access. Is there a predefined role for that?

Also what are the most common roles below Global Administrator?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,366 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 99,431 Reputation points MVP
    2021-10-27T13:46:29.237+00:00

    Depends on what tasks you want this account to be able to perform. Read here for detailed description on all the available roles: https://video2.skills-academy.com/en-gb/azure/active-directory/roles/permissions-reference

    0 comments
  2. JamesTran-MSFT 36,531 Reputation points Microsoft Employee
    2021-10-27T21:32:27.217+00:00

    @Omer
    Thank you for your post!

    From the documentation that @Vasil Michev linked, you should be able to assign the User Administrator role to your user. This role doesn't have billing access because it isn't allotted the microsoft.commerce.billing/allEntities/allTasks action, to manage all aspects of Office 365 billing. If you'd like more control over billing, you can also leverage our Create and assign a custom role in Azure Active Directory documentation to copy the User Admin role and remove any actions that you don't want your user to have.

    When it comes to the most common roles below Global Admin I don't believe there's a list for this. But in order to better answer your question can you share some more details regarding what you're trying to do? Or what you mean by common roles?

    Additional Links:
    Azure AD built-in roles
    Billing Administrator Azure AD Role
    User Administrator Azure AD Role

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.