Role in Microsoft Entra ID that looks after security settings and security reports. Holders cannot alter the self-service password reset policy or decide who may invite guests.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-104SC-500SC-200SC-300SC-401
Each book explains Security Administrator in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
- SSPR
Allows users to unlock or reset their own passwords with methods they have registered. It can apply to All users, None, or Selected (a single group, with nesting supported).
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
Related terms
- Phishing Triage Agent
Security Copilot agent within the Defender portal that sorts phishing alerts reported by users. Setting it up, pausing or removing it requires Security Administrator.
- Sensitivity Label Administrator
Grants full control of sensitivity labels in Purview: view, create, edit and delete. Security Administrator, Organization Management and Compliance Data Administrator role groups all include it.