Microsoft Entra ID · Remaining Built-in Roles
Windows 365 Administrator
Can provision and manage all aspects of Cloud PCs.
Scope: Windows 365 Cloud PC management
Permissions
- Cloud PCs - Provision and deprovision Cloud PCs
- Policies - Manage Cloud PC policies and settings
- Provisioning - Configure provisioning policies
- User Assignments - Manage Cloud PC user assignments
- Health Monitoring - View Cloud PC health and performance
Common use cases
- Cloud PC deployment and management
- Virtual desktop infrastructure administration
- Cloud PC user provisioning
Best practices
- Assign to VDI/Cloud PC administrators
- Coordinate with licensing for Cloud PC SKUs
- Monitor Cloud PC performance and costs
Common questions
When should I assign the Windows 365 Administrator role?
Assign Windows 365 Administrator when you need to: Cloud PC deployment and management; Virtual desktop infrastructure administration; and Cloud PC user provisioning. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Windows 365 Administrator role do?
The Windows 365 Administrator role grants permissions including: Cloud PCs - Provision and deprovision Cloud PCs; Policies - Manage Cloud PC policies and settings; Provisioning - Configure provisioning policies; User Assignments - Manage Cloud PC user assignments; and Health Monitoring - View Cloud PC health and performance. See the Permissions section above for the full list.