Assign, modify, and report on licenses
Create access and session policies in Microsoft Defender for Cloud Apps
Configure and manage connected organizations
Configure and manage device join and registration, including writeback
Configure conditional access app control
Implement certificate-based authentication in Azure AD
Manage the lifecycle of external users in Azure AD Identity Governance settings
Create, configure, and manage groups
Implement and manage password protection and smart lockout
Implement application-enforced restrictions
Implement and manage terms of use
Implement and manage Windows Hello for Business
Create, configure, and manage users
Configure connectors to apps
Implement and manage authentication methods
Configure tenant-wide settings