Azure AD – New administration role available to delegate administration of Microsoft Cloud App Security (MCAS)
As you know, Azure AD comes with administration roles to allow you delegate administration tasks with the least privilege.
As you know, Azure Active Directory provides a large list of administration roles to allow delegating administration tasks and reduce the need to grant the more powerful global administrator role.
Well, 2 new roles are now available:
- Authentication policy administrator to delegate the permissions to manage the authentication methods enabled on Azure AD and associated tasks (multi factor authentication and password policy)
- Domain name administrator to delegate domain names management (add, read, remove or update the domain(s) associated with your Azure AD tenant)
