1. The Windows Admin Center administrator role cannot manage AD users and DNS resource records.
2. The Windows Admin Center Readers role cannot do anything. What is the significance of this group? WAC is not a monitoring software.
There are multiple administrators in the company. Not every administrator needs the highest authority. They just do some simple management tasks, such as creating an account, resetting passwords, or managing DNS resource records.
WAC has only three role groups, and the granularity of permissions simply cannot meet the needs. WAC looks more like a toy, a semi-finished product. The idea of Web-based RBAC is very good, and I hope Microsoft can increase development efforts as soon as possible.
