Workload Specific Admin Roles
Start course

This Managing Azure AD User Roles course will teach you how to plan user roles in Microsoft 365 and how to allocate roles in workloads. You will learn how to configure administrative accounts and how to configure RBAC within Azure AD. You'll also learn how to delegate and manage admin roles.

Later in the course, you will learn how to manage role allocations by using Azure AD and how to plan security and compliance roles for Microsoft 365.

Learning Objectives

  • Plan and Allocate User Roles
  • Configure Role-Based Access (RBAC)
  • Delegate and Manage Admin Access
  • Plan Security and Compliance Roles

Intended Audience

  • IT professionals who are interested in obtaining Microsoft 365 certification
  • Those tasked with configuring and managing Office 365 access


  • A moderate understanding of Microsoft 365 and of Azure AD

Workload-specific admin roles are used to assign administrator roles to an organization's IT administrators for Exchange Online, SharePoint Online, and Skype for Business Online. With this functionality, organizations retain more control over how Office 365 administrators manage their tenant and data. 

Because an administrator that's been assigned a workload specific admin role will only have access to the specific controls, resources and settings that are associated with that particular workload. For example, the Exchange administrator role provides admin access to only Exchange Online-related controls and settings in the Office 365 Admin Center. Those users with this access can manage Exchange Online settings like transport roles and mailbox configurations but will not have access to other Office 365 service controls and settings such as SharePoint collections and such.

By offering more flexibility in role assignment, the new workload-specific admin roles better align permissions to how administrators are typically organized. In situations where an administrator has multiple responsibilities and needs permissions to multiple services such as SharePoint and Exchange, the admin can be assigned both of these roles. With this flexibility, organizations are no longer limited to only one admin role assignment per administrator. Configuring workload-specific admin roles is as easy as selecting a user from the active user list, clicking on Edit User Roles and then selecting Limited Admin Role. What this will do is display a list of all Office 365 admin roles. From there you can simply select the applicable admin role or roles and you're done. 

With the new workload-specific admin roles, organizations now have more control over who has access to their data.

About the Author
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.