Microsoft Entra ID · Remaining Built-in Roles

Windows Update Deployment Administrator

Can create and manage all aspects of Windows Update deployments through Windows Update for Business.

Scope: Windows Update for Business management

Permissions

  • Deployments - Create and manage Windows Update deployment settings
  • Update Rings - Configure update rings and feature updates
  • Driver Updates - Manage driver updates and expedited updates
  • Reports - View Windows Update reports and compliance

Common use cases

  • Windows patching and update management
  • Feature update deployment planning
  • Driver update administration

Best practices

  • Assign to Windows infrastructure team
  • Coordinate with Change Management processes
  • Test updates in rings before broad deployment

Official Microsoft Learn documentation →

Open the interactive RBACMap →