Forum Discussion
Solved
GDAP and not allowing global admin to auto renew
Hi all, The relationships we created two years ago are quickly approaching their expiration date, and I'm interested in how other people are handling the creation of new relationships. With the ...
All the roles were added a few months ago and we were able to move away from requesting the global admin role and enable autorenew without any significant loss in access.
For reference, this is the list of built-in roles with access similar to global admin. 34 of the 43 roles are available through GDAP today.
I say similar because some of the granular roles have access to basic properties while the global admin role has access to all properties. Most likely properties that are not essential common tasks.
| Organizational Branding Administrator | Coming (no eta) |
| Organizational Messages Approver | Coming (no eta) |
| Viva Goals Administrator | Coming (no eta) |
| Viva Pulse Administrator | Coming (no eta) |
| Permissions Management Administrator | Coming (no eta) |
| Edge Administrator | Coming (no eta) |
| Yammer Administrator | Coming (no eta) |
| Virtual Visits Administrator | Coming (no eta) |
| Lifecycle Workflows Administrator | Coming (no eta) |
| Application Administrator | Yes |
| Application Administrator | Yes |
| Authentication policy administrator | Yes |
| Azure Information Protection Administrator | Yes |
| Billing Administrator | Yes |
| Cloud app security administrator | Yes |
| cloud device administrator | Yes |
| Compliance Administrator | Yes |
| Compliance Data Administrator | Yes |
| Conditional Access Administrator | Yes |
| Customer LockBox Access Approver | Yes |
| Desktop Analytics Administrator | Yes |
| Directory Writers | Yes |
| Domain Name Administrator | Yes |
| Exchange Administrator | Yes |
| Fabric Administrator | Yes |
| Global Reader | Yes |
| Hybrid Identity Administrator | Yes |
| Identity Governance Administrator | Yes |
| Insights Administrator | Yes |
| Intune Administrator | Yes |
| Knowledge Administrator | Yes |
| Knowledge Manager | Yes |
| Office Apps Administrator | Yes |
| Power Platform Administrator | Yes |
| Privileged Authentication Administrator | Yes |
| Privileged Role Administrator | Yes |
| Search Administrator | Yes |
| Security Administrator | Yes |
| Security Operator | Yes |
| SharePoint Administrator | Yes |
| Teams Administrator | Yes |
| User Administrator | Yes |
| Windows Update Deployment Administrator | Yes |
All the roles were added a few months ago and we were able to move away from requesting the global admin role and enable autorenew without any significant loss in access.