MC198602 – Update – New Feature: Global reader experience in new SharePoint admin center (archived)

Product:

Azure Active Directory, Entra, Entra ID, Exchange, Information Protection, Information Protection - Office 365, Microsoft 365 admin center, Microsoft 365 Apps, Office 365 general, Office Client, Purview compliance portal, Purview Customer Lockbox, Purview Information Protection, SharePoint, Teams

Platform:

Online, US Instances, Web, World tenant

Status:

Launched

Change type:

Links:

MC191391
59984

Details:

Updated April 15, 2020: To ensure a proper experience we are extending the roll-out timeline for this feature.
The SharePoint admin center will soon support the global reader admin role. Users who are assigned this role will have read-only access to all info and settings in the new SharePoint admin center. This feature is related to the global admin role introduced in MC191391 (September 2019).
We'll be gradually rolling this out to Targeted Release customers in mid-March 2020.
We'll be gradually rolling this out to production and GCC in early April (previously March).
The roll out will be complete by the end of April (previously March).
This message is associated with Microsoft 365 "https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=59984" Roadmap ID 59984.
How does this affect me?
Global reader is the read-only counterpart to the global admin role to help reduce the number of global admins in your organization. Because global admin accounts are powerful and vulnerable to attack, we recommend that you have fewer than five global admins.
Assign the global reader role instead of the global admin role to users who need to view all your organization’s settings but not edit them. For example, to plan, audit, or investigate.
Use the global reader role in combination with other limited admin roles like the SharePoint admin role to allow specialists to perform admin tasks.
What do I need to do to prepare for this change?
To get the most value from this new feature, we suggest that you identify the admins in your organization who should have the global reader role assigned to them. For example:
Remove the global admin role and assign global reader, and any other essential limited roles, to individuals and admins who can complete their tasks with only the global reader role or the role in combination with limited admin roles like SharePoint admin or user admin.
Assign the global reader role to individuals in your organization who don’t have admin center access today and are dependent on coworkers for getting the administrative information they need for their work.
See "https://docs.microsoft.com/azure/active-directory/users-groups-roles/directory-assign-admin-roles" Administrator role permissions in Azure Active Directory.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:
Preview, Targeted Release

Created:
2019-12-20

updated:
2020-04-16