Microsoft Entra ID · Universal Print

Printer Administrator

Manages all aspects of printers and printer connectors in Microsoft Universal Print including configuration and connector settings.

Scope: Full administration of Microsoft Universal Print

Permissions

  • Manage all printers
  • Configure printer connectors
  • Create and manage print policies
  • Consent to print permissions
  • Access print reports

Common use cases

  • Enterprise print management
  • Printer deployment
  • Connector configuration
  • Print policy management
  • Cost control initiatives

Best practices

  • Use print policies for governance
  • Monitor printer health
  • Plan connector placement
  • Track print usage

Security considerations

  • Access to print job metadata
  • Connector has network access
  • Consider print data sensitivity

Common questions

When should I assign the Printer Administrator role?

Assign Printer Administrator when you need to: Enterprise print management; Printer deployment; Connector configuration; Print policy management; and Cost control initiatives. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Printer Administrator role do?

The Printer Administrator role grants permissions including: Manage all printers; Configure printer connectors; Create and manage print policies; Consent to print permissions; and Access print reports. See the Permissions section above for the full list.

What are the security risks of the Printer Administrator role?

Key considerations when assigning Printer Administrator: Access to print job metadata; Connector has network access; and Consider print data sensitivity. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →