Azure AD – You can now enable cloud groups for administration role assignment (preview)
As you know, all administrative permissions to manage any service or capability should be granted by assigning Azure AD administration roles.
In the way to limit the need and use of the global administrator role, 3 new administration roles have been made available:
- Groups administrator to delegate groups (Azure AD security groups, Office 365 Groups, Teams or Yammer) management, covering naming convention, expiration policy or even AAD security group restoration
- Office apps administrator allows you delegating Office apps settings like policies (Office Cloud Policy Service – https://aka.ms/o365clientmgmt), self-service download settings or also the ‘What’s new content’ (currently in preview). This role also grants permission for managing support request and service health access
- Power platform administrator used to delegate Power Platform (Dynamics 365, Flow, PowerApps) all administration tasks
These roles are available from both Azure (https://portal.azure.com/), Azure Active Directory (https://aad.portal.azure.com/) or Office 365 Administration (https://admin.microsoft.com/) portals
