A Microsoft Entra admin role for looking after groups in every admin center. Holders can create, change, delete and restore security and Microsoft 365 groups, control who may create groups and how they are named and expire, and license groups.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Groups Administrator in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra admin
Set on an Azure SQL managed instance or logical server, this is the single Entra principal (a user, group, managed identity or service principal) able to log in to all its databases and to add further Entra users.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- RESTORE
Puts a Delta table back to how it was at an older point, picked by
TO VERSION AS OForTO TIMESTAMP AS OF. You needMODIFY, and onceVACUUMhas cleared the old files it can't succeed. - Microsoft 365 groups
Collaboration groups in Microsoft 365 that give members a shared calendar, mailbox and file space.
- CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.