Documentation feedback about the paragraph about "Setting Up the Global Admin Role"

Feedback Documentation Feedback
,
1

Hi, This is some documentation feedback regarding Configuring Azure and Microsoft Entra ID - SailPoint Identity Services

This is the feedback regarding the documentation:

Regarding the paragraph about “Setting up the Global Admin Role”, it currently has words “create a global admin role”.

  1. The feedback is that the Global Admin role is a Built-In role. So, did you mean Create a new Custom role?

Then the paragraph further mentions “root management group”.

  1. The feedback is: Do you mean the root tenant? Or you mean the management group underneath the root?

The next sentence says “All subscriptions will inherit the custom role”

  1. It says “subscriptions” and “inherit” and “custom role” which implies there is a custom role at a higher level.

  2. As a whole, the Global Admin role is a very high level of privilege, and so there needs to be absolute clarity in the documentation. And the place to provision this super-privileged role, whether it is at Root tenant → Management Group → Subscription

Screenshots of “Setting Up the Global Admin Role” that show visual examples will be a great help too.

  1. Final feedback: Could you outline the potential pros, cons, and impacts of implementing the Global Reader role instead of Global Admin? This approach will benefit organisations where Global Admin approvals are significantly delayed due to the role’s high level of privilege.

Thank you!