Hi
@MaryHillIt's known that the Global Reader role has some limitations, see here
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-ro...Global reader role has a few limitations right now -
OneDrive admin center - OneDrive admin center does not support the Global reader role.
Azure AD portal - Global reader can't read the provisioning mode of an enterprise app.
M365 admin center - Global reader can't read customer lockbox requests. You won't find the Customer lockbox requests tab under Support in the left pane of M365 Admin Center.
Office Security & Compliance Center - Global reader can't read SCC audit logs, do content search, or see Secure Score.
Teams admin center - Global reader cannot read Teams lifecycle, Analytics & reports, IP phone device management and App catalog.
Privileged Access Management (PAM) doesn't support the Global reader role.
Azure Information Protection - Global reader is supported for central reporting only, and when your Azure AD organization isn't on the unified labeling platform.
These features are currently in development.
So nothing which can be done currently until Microsoft develop it. If you want to see them you are going to have to have the Teams Service Admin role assigned or spin up a demo tenant to use for the training
Hope that answers your question
Best, Chris