How to assign Azure AD Roles directly through Access Package

Question

Hello All,

I hope you all are doing good.

Is there a way to directly assign Azure AD admin roles such as Global Admin and PIM Admin from the Access Package? Currently, we can only add Group, App, and sites under the Access Package. I am aware that we can add a specific group to the role and include that group in the Access Package. However, I'm wondering if there is a method to assign roles directly from the Access Package.

Answer 1

There is currently no way to directly assign Azure AD admin roles such as Global Admin and PIM Admin from the Access Package. However, you can add a specific group to the role and include that group in the Access Package. This is the recommended method for managing role assignments in Azure AD.

---

References:

• To identity and beyond—One architect's viewpoint - Delegation of administration
• Assign roles, permissions, and workspace access to users - Azure AD tenant roles and non-Azure AD roles