| author | MandiOhlinger |
|---|---|
| ms.topic | include |
| ms.date | 02/18/2026 |
| ms.author | mandia |
The Microsoft Entra Global Administrator role is a highly privileged role, and should only be used when another role can't be used. This feature requires the Global Administrator role.
To reduce risk, assign the least-privileged role that can complete the task. For more information on the built-in Intune roles and what they can do, see Role-based access control (RBAC) with Intune and Built-in role permissions for Intune.