Microsoft Entra ID
GeneralDelegate By Task
In brief
The documentation now lists Security Administrator, alongside Helpdesk Administrator and User Administrator, for invalidating non-admin users’ refresh tokens.
What Entra admins need to know
Administrators can include Security Administrator when reviewing or assigning access for this task.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Create user | User Administrator | | | Delete users | User Administrator | | | Invalidate refresh tokens of limited admins | User Administrator | | | Invalidate refresh tokens of non-admins | Helpdesk Administrator | User Administrator
Security Administrator | | Invalidate refresh tokens of privileged admins | Privileged Authentication Administrator | | | Read basic configuration | Default user role | | | Reset password for limited admins | User Administrator | |
@@ -492,7 +492,7 @@ Here are the least privileged roles you should use when performing tasks for [us > | Create user | [User Administrator](permissions-reference.md#user-administrator) | | > | Delete users | [User Administrator](permissions-reference.md#user-administrator) | | > | Invalidate refresh tokens of limited admins | [User Administrator](permissions-reference.md#user-administrator) | |-> | Invalidate refresh tokens of non-admins | [Helpdesk Administrator](permissions-reference.md#helpdesk-administrator) | [User Administrator](permissions-reference.md#user-administrator) |+> | Invalidate refresh tokens of non-admins | [Helpdesk Administrator](permissions-reference.md#helpdesk-administrator) | [User Administrator](permissions-reference.md#user-administrator) <br/> [Security Administrator](permissions-reference.md#security-administrator) | > | Invalidate refresh tokens of privileged admins | [Privileged Authentication Administrator](permissions-reference.md#privileged-authentication-administrator) | | > | Read basic configuration | [Default user role](../../fundamentals/users-default-permissions.md) | | > | Reset password for limited admins | [User Administrator](permissions-reference.md#user-administrator) | |