Export (0) Print
Expand All

Reference for Tenant Administrator accounts for Microsoft Intune

Updated: November 21, 2014

Applies To: Microsoft Intune

Each tenant administrator is assigned one of the following roles:

 

Role Details

Billing administrator

Makes purchases, manages subscriptions, manages support tickets, and monitors service health.

Global administrator

Has access to all administrative features. By default, the person who signs up to purchase a Microsoft cloud service on behalf of your organization automatically becomes the first global administrator in your tenant.

  • Only global administrators can assign other administrator roles.

  • There can be more than one global administrator at your organization.

Password administrator

Resets passwords, manages service requests, and monitors service health. Password administrators can reset passwords only for users and other password administrators.

Service support administrator

Manages service requests and monitors service health.

User management administrator

Resets passwords, monitors service health, and manages user accounts, user groups, and service requests.



Each administrator role has the following associated permissions:

 

Permission Billing administrator Global administrator Password administrator Service support administrator User management administrator

View organization and user information

Yes

Yes

Yes

Yes

Yes

Manage support tickets

Yes

Yes

Yes

Yes

Yes

Reset user passwords

No

Yes

Yes

No

Yes; with limitations. This admin cannot reset passwords for billing, global, and service administrators.

Perform billing and purchasing operations

Yes

Yes

No

No

No

Create and manage user views

No

Yes

No

No

Yes

Create, edit, and delete users and groups, and manage user licenses

No

Yes

No

No

Yes; with limitations. This admin cannot delete a global administrator or create other administrators.

Manage domains

No

Yes

No

No

No

Manage organization information

No

Yes

No

No

No

Delegate administrative roles to others

No

Yes

No

No

No

Use directory synchronization

No

Yes

No

No

No



To learn more about administrative accounts in Microsoft Intune, read about the different administrative accounts and permissions for separate tasks. For help managing administrative users, see Task 5: Assign administrative users in Set up Microsoft Intune.

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft