CINXE.COM

<!DOCTYPE html><html class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light" lang="en-us" dir="ltr" data-authenticated="false" data-auth-status-determined="false" data-target="docs" x-ms-format-detection="none"> <head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta property="og:title" content="About admin roles in the Microsoft 365 admin center - Microsoft 365 admin" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide" /><meta property="og:description" content="Learn about admin roles, such as the global admin role, or the service admin role. Roles map to specific business functions and give permissions to do specific tasks in the Microsoft 365 admin center." /><meta property="og:image" content="https://learn.microsoft.com/en-us/media/open-graph-image.png" /> <meta property="og:image:alt" content="Microsoft Learn" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:site" content="@MicrosoftLearn" /> <meta name="color-scheme" content="light dark"><meta name="audience" content="Admin" /> <meta name="author" content="kwekuako" /> <meta name="breadcrumb_path" content="/microsoft-365/breadcrumb/toc.json" /> <meta name="default_moniker" content="o365-worldwide" /> <meta name="depot_name" content="office.Microsoft-365-docs" /> <meta name="description" content="Learn about admin roles, such as the global admin role, or the service admin role. Roles map to specific business functions and give permissions to do specific tasks in the Microsoft 365 admin center." /> <meta name="document_id" content="f18d8345-78f3-0b16-f585-1e53f49d138f" /> <meta name="document_version_independent_id" content="015e98be-2db5-11a3-9abc-6f89b44c3f96" /> <meta name="f1.keywords" content="CSH" /> <meta name="feedback_help_link_type" content="" /> <meta name="feedback_help_link_url" content="" /> <meta name="feedback_product_url" content="https://admin.microsoft.com/adminportal/home?showfeedback=DocsMacCampaign" /> <meta name="feedback_system" content="Standard" /> <meta name="git_commit_id" content="4a407534e2f144a426fbd3a3b4ac99272ec4be14" /> <meta name="gitcommit" content="https://github.com/MicrosoftDocs/microsoft-365-docs-pr/blob/4a407534e2f144a426fbd3a3b4ac99272ec4be14/microsoft-365/admin/add-users/about-admin-roles.md" /> <meta name="locale" content="en-us" /> <meta name="manager" content="scotv" /> <meta name="monikers" content="o365-21vianet" /> <meta name="monikers" content="o365-worldwide" /> <meta name="ms.author" content="kwekua" /> <meta name="ms.collection" content="Tier1" /> <meta name="ms.collection" content="scotvorg" /> <meta name="ms.collection" content="M365-subscription-management" /> <meta name="ms.collection" content="Adm_O365" /> <meta name="ms.collection" content="Adm_TOC" /> <meta name="ms.custom" content="AdminSurgePortfolio" /> <meta name="ms.custom" content="okr_smb" /> <meta name="ms.custom" content="AdminTemplateSet" /> <meta name="ms.custom" content="admindeeplinkMAC" /> <meta name="ms.custom" content="adminvideo" /> <meta name="ms.custom" content="business_assist" /> <meta name="ms.date" content="06/24/2024" /> <meta name="ms.localizationpriority" content="high" /> <meta name="ms.service" content="microsoft-365-business" /> <meta name="ms.topic" content="overview" /> <meta name="original_content_git_url" content="https://github.com/MicrosoftDocs/microsoft-365-docs-pr/blob/live/microsoft-365/admin/add-users/about-admin-roles.md" /> <meta name="page_type" content="conceptual" /> <meta name="pdf_url_template" content="https://learn.microsoft.com/pdfstore/en-us/office.Microsoft-365-docs/{branchName}{pdfName}" /> <meta name="recommendations" content="false" /> <meta name="schema" content="Conceptual" /> <meta name="site_name" content="Docs" /> <meta name="toc_rel" content="../toc.json" /> <meta name="uhfHeaderId" content="MSDocsHeader-M365-IT" /> <meta name="updated_at" content="2024-11-21 11:32 PM" /> <meta name="word_count" content="2666" /> <meta name="persistent_id" content="056101d9-f115-b686-6fea-3bb9bd52419a" /> <meta name="cmProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/68e4b2d8-b70c-4019-b49a-d1f8881e2aea" data-source="generated" /> <meta name="cmProducts" content="https://authoring-docs-microsoft.poolparty.biz/devrel/1dd701e0-441f-4b0a-9806-aa47decc4e35" data-source="generated" /> <meta name="cmProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/57eae307-c3a1-4cac-b645-1a899934bac8" data-source="generated" /> <meta name="spProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/67b2ba1a-6f74-4044-a48a-f0f8ad076b8f" data-source="generated" /> <meta name="spProducts" content="https://authoring-docs-microsoft.poolparty.biz/devrel/0a2fc935-5977-4aa6-9f55-0be03bd2acb8" data-source="generated" /> <meta name="spProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/ee561821-1ac7-45a8-9409-6ba5eb7a5b97" data-source="generated" /> <meta name="scope" content="Microsoft 365" /><meta name="github_feedback_content_git_url" content="https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/admin/add-users/about-admin-roles.md" /><link href="https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide" rel="canonical"><title>About admin roles in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn</title><link rel="stylesheet" href="/static/assets/0.4.028726178/styles/site-ltr.css"> <script id="msdocs-script"> var msDocs = {environment: { supportLevel: 'production', accessLevel: 'online', reviewFeatures: false, systemContent: true, azurePortalHostname: 'portal.azure.com', legacyHosting: false, siteName: 'learn', },data: { timeOrigin: Date.now(), contentLocale: 'en-us', contentDir: 'ltr', userLocale: 'en-us', userDir: 'ltr', pageTemplate: 'Conceptual', brand: '', context: {}, hasBinaryRating: true, feedbackHelpLinkType:'', feedbackHelpLinkUrl:'', standardFeedback: true, showFeedbackReport: false, enableTutorialFeedback: false, feedbackSystem: 'Standard', feedbackGitHubRepo: '', feedbackProductUrl: 'https://admin.microsoft.com/adminportal/home?showfeedback=DocsMacCampaign',extendBreadcrumb: false,isEditDisplayable: true, hideViewSource: false, hasPageActions: true, hasPrintButton: true, hasBookmark: true, hasShare: true, isPermissioned: false, isPrivateUnauthorized: false,hasRecommendations: true,contributors: [{ name: "kwekuako", url: "https://github.com/kwekuako" },{ name: "DesanaMSFT", url: "https://github.com/DesanaMSFT" },{ name: "emmasheridan17-msft", url: "https://github.com/emmasheridan17-msft" },{ name: "cmcatee-MSFT", url: "https://github.com/cmcatee-MSFT" },{ name: "camillepack", url: "https://github.com/camillepack" },{ name: "denisebmsft", url: "https://github.com/denisebmsft" },{ name: "takakiumeda", url: "https://github.com/takakiumeda" },{ name: "msbemba", url: "https://github.com/msbemba" },{ name: "paulinbar", url: "https://github.com/paulinbar" },{ name: "v-mathavale", url: "https://github.com/v-mathavale" },{ name: "v-dihans", url: "https://github.com/v-dihans" },{ name: "pebaum", url: "https://github.com/pebaum" },{ name: "Dansimp", url: "https://github.com/Dansimp" },{ name: "alekyaj", url: "https://github.com/alekyaj" },{ name: "chrfox", url: "https://github.com/chrfox" },{ name: "pabloang", url: "https://github.com/pabloang" },{ name: "MaratMussabekov", url: "https://github.com/MaratMussabekov" },{ name: "modery", url: "https://github.com/modery" },{ name: "lhcole", url: "https://github.com/lhcole" },{ name: "LuiseFreese", url: "https://github.com/LuiseFreese" },{ name: "DCtheGeek", url: "https://github.com/DCtheGeek" },{ name: "twernermsft", url: "https://github.com/twernermsft" },{ name: "Sirkkuw", url: "https://github.com/Sirkkuw" },{ name: "Ajayan1008", url: "https://github.com/Ajayan1008" }],}, functions:{} }; </script><script src="https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js"></script> <script src="https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js"></script><script src="/static/assets/0.4.028726178/global/deprecation.js"></script><script src="/static/assets/0.4.028726178/scripts/en-us/index-docs.js"></script></head> <body lang="en-us" dir="ltr"> <div class="header-holder has-default-focus"> <a href="#main" style="z-index: 1070" class="outline-color-text visually-hidden-until-focused position-fixed inner-focus focus-visible top-0 left-0 right-0 padding-xs text-align-center has-body-background" tabindex="1">Skip to main content</a><div hidden id="cookie-consent-holder" data-test-id="cookie-consent-container"></div> <div id="unsupported-browser" style=" background-color: white; color: black; padding: 16px; border-bottom: 1px solid grey;" hidden > <div style="max-width: 800px; margin: 0 auto;"> <p style="font-size: 24px">This browser is no longer supported.</p> <p style="font-size: 16px; margin-top: 16px;">Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.</p> <div style="margin-top: 12px;"> <a href="https://go.microsoft.com/fwlink/p/?LinkID=2092881 " style=" background-color: #0078d4; border: 1px solid #0078d4; color: white; padding: 6px 12px; border-radius: 2px; display: inline-block; ">Download Microsoft Edge</a> <a href="https://learn.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge" style=" background-color: white; padding: 6px 12px; border: 1px solid #505050; color: #171717; border-radius: 2px; display: inline-block; ">More info about Internet Explorer and Microsoft Edge</a> </div> </div> </div>   <header id="ms--site-header" data-test-id="site-header-wrapper" role="banner" itemscope="itemscope" itemtype="http://schema.org/Organization"> <div id="ms--mobile-nav" class="site-header display-none-tablet padding-inline-none gap-none" data-bi-name="mobile-header" data-test-id="mobile-header"></div> <div id="ms--primary-nav" class="site-header display-none display-flex-tablet" data-bi-name="L1-header" data-test-id="primary-header"></div> <div id="ms--secondary-nav" class="site-header display-none display-flex-tablet" data-bi-name="L2-header" data-test-id="secondary-header"></div> </header><div id="content-header" class="content-header uhf-container has-padding has-default-focus border-bottom-none" data-bi-name="content-header"> <div class="content-header-controls margin-xxs margin-inline-sm-tablet"> <button type="button" class="contents-button button button-sm margin-right-xxs" data-bi-name="contents-expand" aria-haspopup="true" data-contents-button> <span class="icon"><span class="docon docon-menu" aria-hidden="true"></span></span> <span class="contents-expand-title">Table of contents</span> </button> <button type="button" class="ap-collapse-behavior ap-expanded button button-sm" data-bi-name="ap-collapse" aria-controls="action-panel"> <span class="icon"><span class="docon docon-exit-mode" aria-hidden="true"></span></span> <span>Exit focus mode</span> </button> </div> </div><div id="disclaimer-holder" class="has-overflow-hidden has-default-focus">  </div> </div> <div class="mainContainer uhf-container has-default-focus" data-bi-name="body"> <div class="columns has-large-gaps is-gapless-mobile "><div id="left-container" class="left-container is-hidden-mobile column is-one-third-tablet is-one-quarter-desktop"> <nav id="affixed-left-container" class="margin-top-sm-tablet position-sticky display-flex flex-direction-column" aria-label="Primary"></nav> </div> <section class="primary-holder column is-two-thirds-tablet is-three-quarters-desktop">  <div class="columns is-gapless-mobile has-large-gaps "><div id="main-column" class="column is-full is-8-desktop"> <main id="main" class="" role="main" data-bi-name="content" lang="en-us" dir="ltr"> <div id="article-header" class="background-color-body margin-top-sm-tablet margin-bottom-xs display-none-print"> <div class="display-flex align-items-center "><details id="article-header-breadcrumbs-overflow-popover" class="popover" data-for="article-header-breadcrumbs"> <summary class="button button-clear button-primary button-sm inner-focus" aria-label="All breadcrumbs"> <span class="icon"> <span class="docon docon-more"></span> </span> </summary> <div id="article-header-breadcrumbs-overflow" class="popover-content padding-none"> </div> </details> <bread-crumbs id="article-header-breadcrumbs" data-test-id="article-header-breadcrumbs" class="overflow-hidden flex-grow-1 margin-right-sm margin-right-md-tablet margin-right-lg-desktop margin-left-negative-xxs padding-left-xxs"></bread-crumbs><div id="article-header-page-actions" class="opacity-none margin-left-auto display-flex flex-wrap-no-wrap align-items-stretch"><a id="lang-link-tablet" class="button button-primary button-clear button-sm display-none display-inline-flex-tablet" title="Read in English" data-bi-name="language-toggle" data-read-in-link hidden> <span class="icon margin-none" aria-hidden="true" data-read-in-link-icon> <span class="docon docon-locale-globe"></span> </span> <span class="is-visually-hidden" data-read-in-link-text>Read in English</span> </a><button type="button" class="collection button button-clear button-sm button-primary display-none display-inline-flex-tablet" data-list-type="collection" data-bi-name="collection" title="Add to collection"> <span class="icon margin-none" aria-hidden="true"> <span class="docon docon-circle-addition"></span> </span> <span class="collection-status is-visually-hidden">Save</span> </button><a data-contenteditbtn class="button button-clear button-sm text-decoration-none button-primary display-none display-inline-flex-tablet" aria-label="Edit" title="Edit This Document" data-bi-name="edit" href="https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/admin/add-users/about-admin-roles.md" data-original_content_git_url="https://github.com/MicrosoftDocs/microsoft-365-docs-pr/blob/live/microsoft-365/admin/add-users/about-admin-roles.md" data-original_content_git_url_template="{repo}/blob/{branch}/microsoft-365/admin/add-users/about-admin-roles.md" data-pr_repo="" data-pr_branch=""> <span class="icon margin-none" aria-hidden="true"> <span class="docon docon-edit-outline"></span> </span> </a> <details class="popover popover-right" id="article-header-page-actions-overflow"> <summary class="justify-content-flex-start button button-clear button-sm button-primary" aria-label="More actions" title="More actions"> <span class="icon" aria-hidden="true"> <span class="docon docon-more-vertical"></span> </span> </summary> <div class="popover-content padding-xs"><button data-page-action-item="overflow-mobile" type="button" class="justify-content-flex-start button-block button-sm has-inner-focus button button-clear display-none-tablet" data-bi-name="contents-expand" data-contents-button data-popover-close> <span class="icon"> <span class="docon docon-editor-list-bullet" aria-hidden="true"></span> </span><span class="contents-expand-title">Table of contents</span></button><a id="lang-link-overflow" class="justify-content-flex-start button-sm has-inner-focus button button-clear button-block display-none-tablet" title="Read in English" data-bi-name="language-toggle" data-page-action-item="overflow-mobile" data-check-hidden="true" data-read-in-link hidden > <span class="icon" aria-hidden="true" data-read-in-link-icon> <span class="docon docon-locale-globe"></span> </span> <span data-read-in-link-text>Read in English</span> </a><button type="button" class="collection justify-content-flex-start button button-clear button-sm has-inner-focus button-block display-none-tablet" data-list-type="collection" data-bi-name="collection" title="Save" data-page-action-item="overflow-mobile" data-check-hidden="true" data-popover-close> <span class="icon" aria-hidden="true"> <span class="docon docon-circle-addition"></span> </span> <span class="collection-status">Save</span> </button> <button type="button" class="collection justify-content-flex-start button button-clear button-sm has-inner-focus button-block display-none-tablet" data-list-type="plan" data-bi-name="plan" title="Add to Plan" data-page-action-item="overflow-mobile" data-check-hidden="true" data-popover-close hidden> <span class="icon" aria-hidden="true"> <span class="docon docon-circle-addition"></span> </span> <span class="plan-status">Add to Plan</span> </button><a data-contenteditbtn class="button button-clear button-block button-sm has-inner-focus justify-content-flex-start text-decoration-none display-none-tablet" aria-label="Edit" title="Edit This Document" data-bi-name="edit" href="https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/admin/add-users/about-admin-roles.md" data-original_content_git_url="https://github.com/MicrosoftDocs/microsoft-365-docs-pr/blob/live/microsoft-365/admin/add-users/about-admin-roles.md" data-original_content_git_url_template="{repo}/blob/{branch}/microsoft-365/admin/add-users/about-admin-roles.md" data-pr_repo="" data-pr_branch=""> <span class="icon" aria-hidden="true"> <span class="docon docon-edit-outline"></span> </span> <span>Edit</span> </a><div aria-hidden="true" class="margin-none" data-page-action-item="overflow-all"></div> <hr class="display-none-tablet margin-bottom-xxs margin-top-xxs" /> <h4 class="font-size-sm padding-left-xxs">Share via</h4> <a class="button button-clear button-sm button-block has-inner-focus text-decoration-none justify-content-flex-start share-facebook" data-bi-name="facebook" data-page-action-item="overflow-all"> <span class="icon" aria-hidden="true"> <span class="docon docon-facebook-share font-size-md color-primary"></span> </span> <span class="margin-left-xxs">Facebook</span> </a> <a class="button button-clear button-sm has-inner-focus button-block text-decoration-none justify-content-flex-start share-twitter" data-bi-name="twitter" data-page-action-item="overflow-all"> <span class="icon" aria-hidden="true"> <span class="docon docon-xlogo-share font-size-xxs"></span> </span> <span class="margin-left-xxs">x.com</span> </a> <a class="button button-clear button-sm has-inner-focus button-block text-decoration-none justify-content-flex-start share-linkedin" data-bi-name="linkedin" data-page-action-item="overflow-all"> <span class="icon" aria-hidden="true"> <span class="docon docon-linked-in-logo font-size-sm color-primary"></span> </span> <span class="margin-left-xxs">LinkedIn</span> </a> <a class="button button-clear button-sm button-block has-inner-focus text-decoration-none justify-content-flex-start margin-bottom-xxs share-email" data-bi-name="email" data-page-action-item="overflow-all"> <span class="icon" aria-hidden="true"> <span class="docon docon-mail-message font-size-sm color-primary"></span> </span> <span class="margin-left-xxs">Email</span> </a><hr /> <button class="button button-block button-clear button-sm justify-content-flex-start has-inner-focus margin-top-xxs" title="Print" type="button" aria-label="Print" data-bi-name="print" data-page-action-item="overflow-all" data-popover-close data-print-page data-check-hidden="true"> <span class="icon" aria-hidden="true"> <span class="docon docon-print font-size-sm color-primary"></span> </span> <span class="margin-left-xxs">Print</span> </button> </div> </details> </div></div> </div> <div> <button type="button" class="border contents-button button button-clear button-sm is-hidden-tablet has-inner-focus" data-bi-name="contents-expand" data-contents-button hidden> <span class="icon"> <span class="docon docon-editor-list-bullet" aria-hidden="true"></span> </span><span class="contents-expand-title">Table of contents</span></button> </div> <div class="content "><h1 id="about-admin-roles-in-the-microsoft-365-admin-center">About admin roles in the Microsoft 365 admin center</h1><div class="display-flex justify-content-space-between align-items-center flex-wrap-wrap page-metadata-container"> <div class="margin-right-xxs"> <ul class="metadata page-metadata" data-bi-name="page info" lang="en-us" dir="ltr"><li>Article</li><li class="visibility-hidden-visual-diff"><time class="is-invisible" data-article-date aria-label="Article review date" datetime="2024-09-24T22:58:00Z" data-article-date-source="calculated">09/24/2024</time> </li><li class="contributors-holder display-none-print"> <button aria-label="View all contributors" class="contributors-button link-button" data-bi-name="contributors" title="View all contributors">24 contributors</button> </li></ul> </div> <div id="user-feedback" class="margin-block-xxs display-none-print" data-hide-on-archived> <button id="user-feedback-button" data-test-id="conceptual-feedback-button" class="button button-sm button-clear button-primary" type="button" data-bi-name="user-feedback-button" data-user-feedback-button > <span class="icon" aria-hidden="true"> <span class="docon docon-like"></span> </span> <span>Feedback</span> </button> </div></div><nav id="center-doc-outline" class="doc-outline is-hidden-desktop display-none-print margin-bottom-sm" data-bi-name="intopic toc" aria-label="In this article"> <h2 id="ms--in-this-article" class="title is-6 margin-block-xs">In this article</h2> </nav><p>Check out <a href="https://go.microsoft.com/fwlink/?linkid=2197659" data-linktype="external">Microsoft 365 small business help</a> on YouTube.</p> <p>Microsoft 365 or Office 365 subscription comes with a set of admin roles that you can assign to users in your organization using the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank" data-linktype="external">Microsoft 365 admin center</a>. Each admin role maps to common business functions and gives people in your organization permissions to do specific tasks in the admin centers.</p> <div class="TIP"> <p>Tip</p> <p>If you need help with the steps in this topic, consider <a href="https://go.microsoft.com/fwlink/?linkid=2186871" data-linktype="external">working with a Microsoft small business specialist</a>. With Business Assist, you and your employees get around-the-clock access to small business specialists as you grow your business, from onboarding to everyday use.</p> </div> <h2 id="watch-what-is-an-admin">Watch: What is an admin?</h2> <p>Check out this video and others on our <a href="https://go.microsoft.com/fwlink/?linkid=2198028" data-linktype="external">YouTube channel</a>.</p> <div class="embeddedvideo"><iframe src="https://www.microsoft.com/videoplayer/embed/RE1SRc0" frameborder="0" allowfullscreen="true" data-linktype="external"></iframe></div> <ol> <li>While signed into Microsoft 365, select the app launcher. If you see the Admin button, then you're an admin.</li> <li>Select <strong>Admin</strong> to go to the Microsoft 365 admin center.</li> <li>In the left navigation pane, select <strong>Users</strong> > <a href="https://go.microsoft.com/fwlink/p/?linkid=834822" target="_blank" data-linktype="external"><strong>Active users</strong></a>.</li> <li>Select the person who you want to make an admin. The user's details appear in the right dialog box.</li> </ol> <h2 id="before-you-begin">Before you begin</h2> <p>The <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank" data-linktype="external">Microsoft 365 admin center</a> lets you manage Microsoft Entra roles and Microsoft Intune roles. However, these roles are a subset of the roles available in the Microsoft Entra admin center and the Intune admin center.</p> <p>For the full list of detailed Microsoft Entra role descriptions you can manage in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank" data-linktype="external">Microsoft 365 admin center</a>, check out Administrator role permissions in <a href="/en-us/azure/active-directory/roles/permissions-reference" data-linktype="absolute-path">Microsoft Entra built-in roles</a>.</p> <p>For the full list of detailed Intune role descriptions you can manage in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank" data-linktype="external">Microsoft 365 admin center</a>, check out <a href="/en-us/mem/intune/fundamentals/role-based-access-control" data-linktype="absolute-path">Role-based access control (RBAC) with Microsoft Intune</a>.</p> <p>For more information on assigning roles in the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank" data-linktype="external">Microsoft 365 admin center</a>, see <a href="assign-admin-roles?view=o365-worldwide" data-linktype="relative-path">Assign admin roles</a>.</p> <h2 id="security-guidelines-for-assigning-roles">Security guidelines for assigning roles</h2> <p>Because admins have access to sensitive data and files, we recommend that you follow these guidelines to keep your organization's data more secure.</p> <table> <thead> <tr> <th style="text-align: left;">Recommendation</th> <th style="text-align: left;">Why is this important?</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">Have as few global administrators as possible</td> <td style="text-align: left;">Global Admins have almost unlimited access to your organization's settings and most of its data. We recommend you limit the number of Global Admins as much as possible. A Global Admin may inadvertently lock their account and require a password reset. Either another Global Admin or a Privileged Authentication Admin can reset a Global Admin's password. Therefore, we recommend you have at least a Privileged Authentication administrator in the event a Global administrator is locked out of their account.</td> </tr> <tr> <td style="text-align: left;">Assign the <em>least permissive</em> role</td> <td style="text-align: left;">Assigning the <em>least permissive</em> role means giving admins only the access they need to get the job done. For example, if you want someone to reset employee passwords you shouldn't assign the unlimited global admin role, you should assign a limited admin role, like Password admin or Helpdesk admin.</td> </tr> <tr> <td style="text-align: left;">Require multi-factor authentication for admins</td> <td style="text-align: left;">It's actually a good idea to require MFA for all of your users, but admins should definitely be required to use MFA to sign in. MFA makes users use a second method of identification to verify their identity. Admins can have access to much of customer and employee data. If you require MFA, even if the admin's password gets compromised, the password is useless without the second method of identification. <br><br>When you turn on MFA, the next time the user signs in, they'll need to provide an alternate email address and phone number for account recovery. <br> <a href="../security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide" data-linktype="relative-path">Set up multi-factor authentication</a></td> </tr> </tbody> </table> <p>If you get a message in the admin center that you don't have permissions to edit a setting or page, it's because you're assigned a role that doesn't have that permission. Talk to another admin to assign you the correct permissions or see <a href="assign-admin-roles?view=o365-worldwide" data-linktype="relative-path">Assign admin roles</a> to assign yourself the correct role.</p> <h2 id="commonly-used-microsoft-365-admin-center-roles">Commonly used Microsoft 365 admin center roles</h2> <p>In the Microsoft 365 admin center, you can go to <a href="https://go.microsoft.com/fwlink/p/?linkid=2097861" target="_blank" data-linktype="external"><strong>Role assignments</strong></a>, and then select any role to open its detail pane. Select the <strong>Permissions</strong> tab to view the detailed list of what admins assigned that role have permissions to do. Select the <strong>Assigned</strong> or <strong>Assigned admins</strong> tab to add users to roles.</p> <p>You'll probably only need to assign the following roles in your organization. By default, we first show roles that most organizations use. If you can't find a role, go to the bottom of the list and select <strong>Show all by Category</strong>. For detailed information, including the cmdlets associated with a role, see <a href="/en-us/azure/active-directory/roles/permissions-reference" data-linktype="absolute-path">Microsoft Entra built-in roles</a>.</p> <table> <thead> <tr> <th>Admin role</th> <th>Who should be assigned this role?</th> </tr> </thead> <tbody> <tr> <td>AI administrator</td> <td>Assign the AI Administrator role to users who need to do the following tasks:<br> • Manage all aspects of Microsoft 365 Copilot <br> • Manage AI-related enterprise services, extensibility, and copilot agents from the Integrated apps page in the Microsoft 365 admin center <br> • Approve and publish line-of-business copilot agents <br> • Allow users to install an app or install an app for users in the organization if the app does not require permission <br> • Read and configure Azure and Microsoft 365 service health dashboards <br> • View usage reports, adoption insights, and organizational insight <br> • Create and manage support tickets in Azure and the Microsoft 365 admin center<br></td> </tr> <tr> <td>Billing admin</td> <td>Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health. Billing admins cannot assign licenses; If a Billing admin is also a License or User Administrator, visit <a href="https://go.microsoft.com/fwlink/p/?linkid=842264" data-linktype="external">Licenses</a> to assign licenses.<br><br> Billing admins also can:<br> • Manage all aspects of billing<br> • Create and manage support tickets in the Azure portal <br><br></td> </tr> <tr> <td>Exchange admin</td> <td>Assign the Exchange admin role to users who need to view and manage your user's email mailboxes, Microsoft 365 groups, and Exchange Online. <br><br> Exchange admins can also:<br> • Recover deleted items in a user's mailbox <br> • Set up "Send As" and "Send on behalf" delegates <br></td> </tr> <tr> <td>Fabric admin</td> <td>Assign the Fabric admin role to users who need to do the following: <br> • Manage all admin features for Microsoft Fabric and Power BI <br> • Report on usage and performance <br> • Review and manage auditing</td> </tr> <tr> <td>Global admin</td> <td>Giving too many users global access is a security risk and we recommend that you have as few global admins as possible. <br><br> Only global admins can:<br> • Reset passwords for all users <br> • Add and manage domains <br> • Unblock another global admin <br><br> <strong>Note:</strong> The person who signed up for Microsoft online services automatically becomes a Global admin. Additionally, only Global admins can view and manage subscriptions purchased through a Partner.</td> </tr> <tr> <td>Global reader</td> <td>Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view. The global reader admin can't edit any settings.</td> </tr> <tr> <td>Groups admin</td> <td>Assign the groups admin role to users who need to manage all groups settings across admin centers, including the Microsoft 365 admin center and Microsoft Entra admin center. <br><br> Groups admins can:<br> • Create, edit, delete, and restore Microsoft 365 groups<br> • Create and update group creation, expiration, and naming policies<br> • Create, edit, delete, and restore Microsoft Entra security groups</td> </tr> <tr> <td>Helpdesk admin</td> <td>Assign the Helpdesk admin role to users who need to do the following:<br> • Reset passwords<br> • Force users to sign out<br> • Manage service requests<br> • Monitor service health<br><br> <strong>Note</strong>: The Helpdesk admin can only help non-admin users and users assigned these roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, and Reports reader.</td> </tr> <tr> <td>License admin</td> <td>Assign the License admin role to users who need to assign and remove licenses from users and edit their usage location. <br><br> License admins also can: <br> • Reprocess license assignments for group-based licensing <br> • Assign product licenses to groups for group-based licensing</td> </tr> <tr> <td>Message center privacy reader</td> <td>Assign the Message center privacy reader role to users who need to read privacy and security messages and updates in the Microsoft 365 Message center. Message center privacy readers may get email notifications related to data privacy, depending on their preferences, and they can unsubscribe using Message center preferences. Only global administrators and Message center privacy readers can read data privacy messages. This role has no permission to view, create, or manage service requests. <br><br>Message center privacy readers can also: <br> • Monitor all notifications in the Message Center, including data privacy messages<br> • View groups, domains, and subscriptions</td> </tr> <tr> <td>Message center reader</td> <td>Assign the Message center reader role to users who need to do the following: <br> • Monitor message center notifications<br> • Get weekly email digests of message center posts and updates<br> • Share message center posts<br> • Have read-only access to Microsoft Entra services, such as users and groups</td> </tr> <tr> <td>Migration admin</td> <td>Assign the Microsoft 365 Migration Administrator role to users who need to do the following tasks: <br> • Use Migration Manager in the Microsoft 365 admin center to manage content migration to Microsoft 365, including Teams, OneDrive for Business, and SharePoint sites, from various sources such as Google Drive, Dropbox, and Box.<br> • Select migration sources, create migration inventories (such as Google Drive user lists), schedule and execute migrations, and download reports.<br> • Create new SharePoint sites if the destination sites don't already exist, create SharePoint lists under the SharePoint admin sites, and create and update items in SharePoint lists.<br> • Manage migration project settings and migration lifecycle for tasks as well as manage permission mappings from source to destination.<br><br><strong>Note:</strong> With this role, you can only migrate from Google Drive, Box, Dropbox and Egnyte. This role doesn't allow you to migrate from file share sources from the SharePoint admin center. Use the SharePoint admin to migrate from file share sources.</td> </tr> <tr> <td>Office Apps admin</td> <td>Assign the Office Apps admin role to users who need to do the following: <br> • Use the Cloud Policy service for Microsoft 365 to create and manage cloud-based policies.<br> • Create and manage service requests<br> • Manage the What's New content that users see in their apps in Microsoft 365<br> • Monitor service health</td> </tr> <tr> <td>Organizational Message Writer</td> <td>Assign the Organizational Message Writer role to users who need to write, publish, manage, and review the organizational messages for end-users through Microsoft product surfaces.</td> </tr> <tr> <td>Organizational Messages Approver</td> <td>Assign the Organizational Messages Approver role to users who need to review, approve, or reject new organizational messages for delivery in the Microsoft 365 admin center before they are sent to users through Microsoft product surfaces.</td> </tr> <tr> <td>Password admin</td> <td>Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators.</td> </tr> <tr> <td>Power Platform admin</td> <td>Assign the Power Platform admin role to users who need to do the following: <br> • Manage all admin features for Power Apps, Power Automate, Power BI, Microsoft Fabric, and Microsoft Purview Data Loss Prevention<br> • Create and manage service requests<br> • Monitor service health</td> </tr> <tr> <td>Reports reader</td> <td>Assign the Reports reader role to users who need to do the following: <br> • View usage data and the activity reports in the Microsoft 365 admin center<br> • Get access to the Power BI adoption content pack<br> • Get access to sign-in reports and activity in Microsoft Entra ID<br> • View data returned by Microsoft Graph reporting API</td> </tr> <tr> <td>Search admin</td> <td>Assign the Search admin role to users who need to create and manage search result content and define query settings for improved search results within the organization. The Search admin manages the Microsoft search configuration and can perform all the content-management tasks that a Search editor can.</td> </tr> <tr> <td>Service Support admin</td> <td>Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role: <br> • Open and manage service requests<br> • View and share message center posts<br> • Monitor service health</td> </tr> <tr> <td>SharePoint admin</td> <td>Assign the SharePoint admin role to users who need to access and manage the SharePoint Online admin center. <br><br>SharePoint admins can also: <br> • Create and delete sites<br> • Manage site collections and global SharePoint settings</td> </tr> <tr> <td>Teams administrator</td> <td>Assign the Teams administrator role to users who need to access and manage the Teams admin center. <br><br>Teams administrator can also: <br> • Manage meetings<br> • Manage conference bridges<br> • Manage all org-wide settings, including federation, teams upgrade, and teams client settings</td> </tr> <tr> <td>User admin</td> <td>Assign the User admin role to users who need to do the following for all users: <br> • Add users and groups<br> • Assign licenses<br> • Manage most users properties<br> • Create and manage user views<br> • Update password expiration policies<br> • Manage service requests<br> • Monitor service health <br><br> The user admin can also do the following actions for users who aren't admins and for users assigned the following roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, Reports reader: <br> • Manage usernames<br> • Delete and restore users<br> • Reset passwords<br> • Force users to sign out<br> • Update (FIDO) device keys</td> </tr> <tr> <td>User Experience Success Manager</td> <td>Assign the User Experience Success Manager role to users who need to access Experience Insights, Adoption Score, and the Message Center in the Microsoft 365 admin center. This role includes the permissions of the Usage Summary Reports Reader role.</td> </tr> </tbody> </table> <h2 id="permissions-based-on-admin-role-and-group-type-in-m365-admin-page">Permissions based on Admin role and Group type in M365 Admin page</h2> <table> <thead> <tr> <th>Admin Role</th> <th>M365 Groups</th> <th>Security Groups</th> <th>Distribution Groups</th> <th>Mail Enabled Security Groups</th> </tr> </thead> <tbody> <tr> <td>Global admin</td> <td>Create, Read, Update, Delete</td> <td>Create, Read, Update, Delete</td> <td>Create, Read, Update, Delete</td> <td>Create, Read, Update, Delete</td> </tr> <tr> <td>Global reader</td> <td>Read</td> <td>Read</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>User admin</td> <td>Create, Read, Update, Delete, <em><strong>Can't update EXO properties</strong></em></td> <td>Create, Read, Update, Delete</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>Exchange admin</td> <td>Create, Read, Update, Delete</td> <td>Read, Update - <em>only groups they own</em>, Delete - <em>only groups they own</em></td> <td>Create, Read, Update, Delete</td> <td>Create, Read, Update, Delete</td> </tr> <tr> <td>Teams admin</td> <td>Create, Read, Update, Delete, <em><strong>Can't update EXO properties</strong></em></td> <td>Create, Read, Update, Delete - <em>only groups they own</em></td> <td>Read</td> <td>Read</td> </tr> <tr> <td>SharePoint admin</td> <td>Create, Read, Update, Delete, <em><strong>Can't update EXO properties</strong></em></td> <td>Create, Read, Update, Delete -<em>only groups they own</em></td> <td>Read</td> <td>Read</td> </tr> <tr> <td>Billing admin</td> <td>Read</td> <td>Read</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>Skype admin</td> <td>Read</td> <td>Read</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>Service admin</td> <td>Read</td> <td>Read</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>Group admin</td> <td>Create, Read, Update, Delete, <em><strong>Can't update EXO properties</strong></em></td> <td>Create, Read, Update, Delete</td> <td>Read</td> <td>Read</td> </tr> <tr> <td>AI administrator</td> <td>Read</td> <td>Read</td> <td>Read</td> <td>Read</td> </tr> </tbody> </table> <h2 id="delegated-administration-for-microsoft-partners">Delegated administration for Microsoft Partners</h2> <p>If you're working with a Microsoft partner, you can assign them admin roles. They, in turn, can assign users in your company, or their company, admin roles. You may want to assign admin roles to partners if they're setting up and managing your online organization for you.</p> <p>A partner can assign these roles:</p> <ul> <li><p><strong>Admin Agent</strong> Privileges equivalent to a global admin, except for managing multi-factor authentication through the Partner Center.</p> </li> <li><p><strong>Helpdesk Agent</strong> Privileges equivalent to a helpdesk admin.</p> </li> </ul> <p>Before the partner can assign these roles to users, you must add the partner as a delegated admin to your account. The partner has to be an authorized partner. The partner sends you an email to ask you if you want to give them permission to act as a delegated admin. For instructions, see <a href="../misc/add-partner?view=o365-worldwide" data-linktype="relative-path">Authorize or remove partner relationships</a>.</p> <h2 id="volume-licensing-roles">Volume licensing roles</h2> <p>Permissions to volume licensing information in Microsoft 365 admin center are controlled by the VL Agreement Administrators in Volume Licensing Service Center (VLSC), even for VL roles that predominantly use functionality in the Microsoft 365 admin center rather than VLSC.</p> <ul> <li><p>Some volume licensing (VL) functionality is now available in Microsoft 365 admin center in a new volume licensing blade visible only to volume licensing users only.</p> </li> <li><p>Volume licensing users see no other Microsoft 365 admin center information or functionality.</p> </li> <li><p>Microsoft 365 admin center Global Admins have no role in assigning VL user permissions and do not need to assign any admin permissions to VL users for them to see the volume licensing blade.</p> </li> <li><p>Volume licensing users must first register on the Volume Licensing Service Center (VLSC), where all roles and permissions for volume licensing functions is managed.</p> </li> <li><p>For more information about volume licensing in Microsoft 365 admin center, see <a href="/en-us/licensing/vlsc-faqs-home-page" data-linktype="absolute-path">Frequently Asked Questions for the Volume Licensing Service Center</a> or <a href="/en-us/licensing/contact-us" data-linktype="absolute-path">contact the Volume Licensing Service team</a>.</p> </li> </ul> <h2 id="related-content">Related content</h2> <p><a href="assign-admin-roles?view=o365-worldwide" data-linktype="relative-path">Assign admin roles</a> (article)<br> <a href="azure-ad-roles-in-the-mac?view=o365-worldwide" data-linktype="relative-path">Microsoft Entra roles in the Microsoft 365 admin center</a> (article)<br> <a href="../activity-reports/activity-reports?view=o365-worldwide" data-linktype="relative-path">Activity reports in the Microsoft 365 admin center</a> (article)<br> <a href="about-exchange-online-admin-role?view=o365-worldwide" data-linktype="relative-path">Exchange Online admin role</a> (article)</p> </div><div id="ms--inline-notifications" class="margin-block-xs" data-bi-name="inline-notification"></div><div id="assertive-live-region" role="alert" aria-live="assertive" class="visually-hidden" aria-relevant="additions" aria-atomic="true"></div> <div id="polite-live-region" role="status" aria-live="polite" class="visually-hidden" aria-relevant="additions" aria-atomic="true"></div>  </main> <section id="site-user-feedback-footer" class="font-size-sm margin-top-md" data-test-id="site-user-feedback-footer" data-bi-name="site-feedback-section"> <hr class="hr" /> <h2 id="feedback" class="title is-3">Feedback</h2> <div class="display-flex flex-wrap-wrap align-items-center"> <p class="font-weight-semibold margin-xxs margin-left-none">Was this page helpful?</p> <div class="buttons"> <button class="thumb-rating-button like button button-primary button-sm" data-test-id="footer-rating-yes" data-binary-rating-response="rating-yes" type="button" title="This article is helpful" data-bi-name="button-rating-yes" aria-pressed="false" > <span class="icon" aria-hidden="true"> <span class="docon docon-like"></span> </span> <span>Yes</span> </button> <button class="thumb-rating-button dislike button button-primary button-sm" data-test-id="footer-rating-no" data-binary-rating-response="rating-no" type="button" title="This article is not helpful" data-bi-name="button-rating-no" aria-pressed="false" > <span class="icon" aria-hidden="true"> <span class="docon docon-dislike"></span> </span> <span>No</span> </button> </div> </div><div class="display-flex flex-wrap-wrap margin-top-xxs"><div> <a data-bi-name="provide-feedback-cta" class="has-external-link-indicator" href="https://admin.microsoft.com/adminportal/home?showfeedback=DocsMacCampaign" data-bi-name="product-feedback" > <span>Provide product feedback</span> </a></div></div> </section> <aside id="ms--additional-resources-mobile" aria-label="Additional resources" class="display-none-desktop display-none-print" > <hr class="hr" hidden /> <h2 id="ms--additional-resources-mobile-heading" class="title is-3" hidden>Additional resources</h2> <section id="right-rail-recommendations-mobile" data-bi-name="recommendations" hidden></section> <section id="right-rail-training-mobile" data-bi-name="learning-resources-card" hidden></section> <section id="right-rail-events-mobile" data-bi-name="events-card" hidden></section> <section id="right-rail-qna-mobile" data-bi-name="qna-link-card" hidden></section> </aside><div class="border-top is-visible-interactive has-default-focus margin-top-sm "><footer id="footer-interactive" data-bi-name="footer" class="footer-layout"><div class="display-flex gap-xs flex-wrap-wrap is-full-height padding-right-lg-desktop"><a data-mscc-ic="false" class="locale-selector-link button button-sm button-clear flex-shrink-0" href="#" data-bi-name="select-locale"> <span class="icon" aria-hidden="true"> <span class="docon docon-world"></span> </span> <span class="local-selector-link-text"></span></a><div class="ccpa-privacy-link" data-ccpa-privacy-link hidden> <a href="https://aka.ms/yourcaliforniaprivacychoices" class="button button-sm button-clear flex-shrink-0" data-mscc-ic="false" data-bi-name="your-privacy-choices" > <svg role="img" aria-label="California Consumer Privacy Act (CCPA) Opt-Out Icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43" focusable="false" > <title>California Consumer Privacy Act (CCPA) Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"></path> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"></path> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"></path> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"></path> </svg> <span>Your Privacy Choices</span> </a> </div> <div class="flex-shrink-0"> <div class="dropdown has-caret-up"> <button class="dropdown-trigger button button-clear button-sm has-inner-focus theme-dropdown-trigger" aria-controls="theme-menu-interactive" aria-expanded="false" title="Theme" data-bi-name="theme"> <span class="icon"> <span class="docon docon-sun" aria-hidden="true"></span> </span> <span>Theme</span> <span class="icon expanded-indicator" aria-hidden="true"> <span class="docon docon-chevron-down-light"></span> </span> </button> <div class="dropdown-menu" id="theme-menu-interactive" role="menu"> <ul class="theme-selector padding-xxs" role="none"> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="light"> <span class="theme-light margin-right-xxs"> <span class="theme-selector-icon border display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>Light</span> </button> </li> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="dark"> <span class="theme-dark margin-right-xxs"> <span class="border theme-selector-icon display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>Dark</span> </button> </li> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="high-contrast"> <span class="theme-high-contrast margin-right-xxs"> <span class="border theme-selector-icon display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>High contrast</span> </button> </li> </ul> </div> </div> </div> </div> <ul class="links" data-bi-name="footerlinks"> <li class="manage-cookies-holder" hidden></li><li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/previous-versions/" data-bi-name="archivelink">Previous Versions</a></li> <li><a class="external-link-indicator" data-mscc-ic="false" href="https://techcommunity.microsoft.com/t5/microsoft-learn-blog/bg-p/MicrosoftLearnBlog" data-bi-name="bloglink">Blog</a></li> <li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/contribute/" data-bi-name="contributorGuide">Contribute</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-bi-name="privacy">Privacy</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/legal/termsofuse" data-bi-name="termsofuse">Terms of Use</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="https://www.microsoft.com/legal/intellectualproperty/Trademarks/" data-bi-name="trademarks">Trademarks</a></li><li>© Microsoft 2024</li> </ul> </footer></div></div><div id="ms--additional-resources" class="right-container column is-4-desktop display-none display-block-desktop" data-bi-name="pageactions" role="complementary" aria-label="Additional resources" > <div id="affixed-right-container" class="margin-top-sm-tablet" data-bi-name="right-column"> <h2 id="ms--additional-resources-heading" class="title is-6 margin-top-md" hidden>Additional resources</h2> <section id="right-rail-events" data-bi-name="events-card" hidden></section> <section id="right-rail-training" data-bi-name="learning-resources-card" hidden></section> <section id="right-rail-recommendations" data-bi-name="recommendations" hidden></section> <nav id="side-doc-outline" class="doc-outline" data-bi-name="intopic toc" aria-label="In this article"> <h3>In this article</h3> </nav> <section id="right-rail-qna" class="margin-top-xxs" data-bi-name="qna-link-card" hidden></section> </div> </div></div>  </section>   <aside id="interactive-container" class="interactive-container is-visible-interactive column has-body-background-dark "> </aside>  </div> </div>  <section class="border-top has-default-focus is-hidden-interactive margin-top-sm "><footer id="footer" data-bi-name="footer" class="footer-layout uhf-container has-padding" role="contentinfo"><div class="display-flex gap-xs flex-wrap-wrap is-full-height padding-right-lg-desktop"><a data-mscc-ic="false" class="locale-selector-link button button-sm button-clear flex-shrink-0" href="#" data-bi-name="select-locale"> <span class="icon" aria-hidden="true"> <span class="docon docon-world"></span> </span> <span class="local-selector-link-text"></span></a><div class="ccpa-privacy-link" data-ccpa-privacy-link hidden> <a href="https://aka.ms/yourcaliforniaprivacychoices" class="button button-sm button-clear flex-shrink-0" data-mscc-ic="false" data-bi-name="your-privacy-choices" > <svg role="img" aria-label="California Consumer Privacy Act (CCPA) Opt-Out Icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 14" xml:space="preserve" height="16" width="43" focusable="false" > <title>California Consumer Privacy Act (CCPA) Opt-Out Icon</title> <path d="M7.4 12.8h6.8l3.1-11.6H7.4C4.2 1.2 1.6 3.8 1.6 7s2.6 5.8 5.8 5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#fff"></path> <path d="M22.6 0H7.4c-3.9 0-7 3.1-7 7s3.1 7 7 7h15.2c3.9 0 7-3.1 7-7s-3.2-7-7-7zm-21 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f"></path> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L20.8 7l-2.2-2.2c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0l2.2 2.2L23.8 4c.2-.2.6-.2.8 0z" style="fill:#fff"></path> <path d="M12.7 4.1c.2.2.3.6.1.8L8.6 9.8c-.1.1-.2.2-.3.2-.2.1-.5.1-.7-.1L5.4 7.7c-.2-.2-.2-.6 0-.8.2-.2.6-.2.8 0L8 8.6l3.8-4.5c.2-.2.6-.2.9 0z" style="fill:#06f"></path> </svg> <span>Your Privacy Choices</span> </a> </div> <div class="flex-shrink-0"> <div class="dropdown has-caret-up"> <button class="dropdown-trigger button button-clear button-sm has-inner-focus theme-dropdown-trigger" aria-controls="theme-menu" aria-expanded="false" title="Theme" data-bi-name="theme"> <span class="icon"> <span class="docon docon-sun" aria-hidden="true"></span> </span> <span>Theme</span> <span class="icon expanded-indicator" aria-hidden="true"> <span class="docon docon-chevron-down-light"></span> </span> </button> <div class="dropdown-menu" id="theme-menu" role="menu"> <ul class="theme-selector padding-xxs" role="none"> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="light"> <span class="theme-light margin-right-xxs"> <span class="theme-selector-icon border display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>Light</span> </button> </li> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="dark"> <span class="theme-dark margin-right-xxs"> <span class="border theme-selector-icon display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>Dark</span> </button> </li> <li class="theme display-block" role="menuitem"> <button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="high-contrast"> <span class="theme-high-contrast margin-right-xxs"> <span class="border theme-selector-icon display-inline-block has-body-background" aria-hidden="true"> <svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14"> <rect width="22" height="14" class="has-fill-body-background" /> <rect x="5" y="5" width="12" height="4" class="has-fill-secondary" /> <rect x="5" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="8" y="2" width="2" height="1" class="has-fill-secondary" /> <rect x="11" y="2" width="3" height="1" class="has-fill-secondary" /> <rect x="1" y="1" width="2" height="2" class="has-fill-secondary" /> <rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary" /> <rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary" /> </svg> </span> </span> <span>High contrast</span> </button> </li> </ul> </div> </div> </div> </div> <ul class="links" data-bi-name="footerlinks"> <li class="manage-cookies-holder" hidden></li><li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/previous-versions/" data-bi-name="archivelink">Previous Versions</a></li> <li><a class="external-link-indicator" data-mscc-ic="false" href="https://techcommunity.microsoft.com/t5/microsoft-learn-blog/bg-p/MicrosoftLearnBlog" data-bi-name="bloglink">Blog</a></li> <li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/contribute/" data-bi-name="contributorGuide">Contribute</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-bi-name="privacy">Privacy</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/legal/termsofuse" data-bi-name="termsofuse">Terms of Use</a></li><li><a class="external-link-indicator" data-mscc-ic="false" href="https://www.microsoft.com/legal/intellectualproperty/Trademarks/" data-bi-name="trademarks">Trademarks</a></li><li>© Microsoft 2024</li> </ul> </footer> </section> <div id="action-panel" role="region" aria-label="Action Panel" class="action-panel has-default-focus" tabindex="-1"></div> </body> </html>