IT:AD:Azure AD:Roles:Administration
Summary
It's worth repeating 1): although closely tied together at the hip, the Azure AD Service is a different Service to the Azure – and hence, Azure AD Roles are not the same as IT:AD:Azure:Security:Role.
Notes
The Administration Roles2) that can be assigned to an Account are:
Global administrator(API: “Company Administrator”):- The person who signs up for the Azure account becomes the first global administrator.
- Only global administrators can assign other administrator roles.
*
Billing administratorPassword administrator(API:“Helpdesk Administrator”).Service administratorUser administratorSecurity readerSecurity administrator
Whereas Azure and Azure AD roles are separate, IT:AD:Office 365 (O365) and other services do reuses some of the Azure AD roles3).
Resources
3)
“Azure AD administrative roles are also used by other services such as Office 365 and Microsoft Intune.” https://azure.microsoft.com/en-us/documentation/articles/active-directory-how-subscriptions-associated-directory/