As you know, Azure AD comes with administration roles to allow you delegate administration tasks with the least privilege.

Well, until now if you wanted to delegate Microsoft Cloud App Security (MCAS) administration tasks you had to use either the Security Administrator or Global Administrator roles.

Both granting much more permissions than required for MCAS.

Good news, you can now use the new Cloud App Security Administrator administration role to grant administration tasks to MCAS only.