Microsoft Entra ID · Developer & Technical
Network Administrator
Can manage network locations and review enterprise network design insights for Microsoft 365 SaaS applications.
Scope: Network location management and M365 connectivity optimization
Permissions
- Manage network locations
- Review network performance insights
- Configure discovered user locations
- View network telemetry
- Optimize M365 network connectivity
- Review network design recommendations
Common use cases
- Office network location configuration
- Network performance optimization
- Connectivity troubleshooting
- Network design review
- User location configuration
Best practices
- Configure accurate office locations
- Review network insights regularly
- Implement connectivity recommendations
- Document network configurations
- Monitor performance trends
Security considerations
- Network location data affects Conditional Access
- Location accuracy impacts policy enforcement
- Review location configurations carefully
Common questions
When should I assign the Network Administrator role?
Assign Network Administrator when you need to: Office network location configuration; Network performance optimization; Connectivity troubleshooting; Network design review; and User location configuration. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Network Administrator role do?
The Network Administrator role grants permissions including: Manage network locations; Review network performance insights; Configure discovered user locations; View network telemetry; Optimize M365 network connectivity; and Review network design recommendations. See the Permissions section above for the full list.
What are the security risks of the Network Administrator role?
Key considerations when assigning Network Administrator: Network location data affects Conditional Access; Location accuracy impacts policy enforcement; and Review location configurations carefully. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.