A Microsoft Entra role able to create and manage users and every kind of group, assign licences, and reset passwords for limited administrators.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains User Administrator in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra
The umbrella brand covering Microsoft's identity and network access portfolio. Internet Access, Private Access, External ID and ID Governance all belong to it, built on top of the core directory service, Entra ID.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- MANAGE
A Unity Catalog privilege allowing a principal to grant and revoke access on an object, hand over its ownership and drop it, all without being the owner. It gives no data access by itself and is not part of
ALL PRIVILEGES.
Related terms
- Microsoft Entra roles
Administrative roles at tenant level, User Administrator for example, that manage objects in Entra but confer no rights over Azure resources, which Azure RBAC handles separately.