Use new Azure Active Directory roles to reduce the number of Global administrators

Performing your daily administrative tasks in Azure Active Directory (Azure AD) shouldn’t require you to be a Global administrator. We introduced 16 new roles in Azure AD designed to help you reduce the number of Global administrators by delegating administration tasks and assigning lower-privileged roles.

For example, Global reader, a read-only version of the Global administrator role, enables you to view all settings and administrative information. Global reader is useful for planning, audits, and investigations, and makes it easier to work without Global administrator privileges. Global reader is in public preview and is supported across almost all Microsoft 365 services.

In addition, other newly built-in roles—also in preview—help support credential management and more.

To learn about these new roles, read 16 new built-in roles—including Global reader—now available in preview.