azureblog.co.uk
← cd ~/compare
// compare · entra roles

Billing Administrator vs License Administrator

Two Microsoft Entra built-in roles that are often confused, compared permission by permission.

In short: Billing Administrator has 7 permissions. License Administrator has 9 permissions. Assign the one with less access that still covers the job.

DetailBilling AdministratorLicense Administrator
What Microsoft saysCan perform common billing related tasks like updating payment information.Can manage product licenses on users and groups.
Size7 permissions9 permissions

Permissions only Billing Administrator lists (4)

  • microsoft.azure.supportTickets/allEntities/allTasks
  • microsoft.commerce.billing/allEntities/allProperties/allTasks
  • microsoft.directory/organization/basic/update
  • microsoft.office365.supportTickets/allEntities/allTasks

Permissions only License Administrator lists (6)

  • microsoft.directory/authorizationPolicy/standard/read
  • microsoft.directory/groups/assignLicense
  • microsoft.directory/groups/reprocessLicenseAssignment
  • microsoft.directory/users/assignLicense
  • microsoft.directory/users/reprocessLicenseAssignment
  • microsoft.directory/users/usageLocation/update

Permissions are listed as Microsoft writes them. A broad one, such as one ending in allTasks, can cover several narrower ones listed for the other role.

Billing Administrator explained License Administrator explained

Spotted something out of date or wrong? Tell us and we'll fix it.