← cd ~/compare
// compare · entra roles
Compliance Administrator vs Compliance Data Administrator
Two Microsoft Entra built-in roles that are often confused, compared permission by permission.
In short: Compliance Administrator has 7 permissions. Compliance Data Administrator has 9 permissions. Assign the one with less access that still covers the job.
| Detail | Compliance Administrator | Compliance Data Administrator |
|---|---|---|
| What Microsoft says | Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365. | Creates and manages compliance content. |
| Size | 7 permissions | 9 permissions |
Permissions only Compliance Administrator lists (1)
microsoft.directory/entitlementManagement/allProperties/read
Permissions only Compliance Data Administrator lists (3)
microsoft.azure.informationProtection/allEntities/allTasksmicrosoft.directory/authorizationPolicy/standard/readmicrosoft.directory/cloudAppSecurity/allProperties/allTasks
Permissions are listed as Microsoft writes them. A broad one, such as one ending in allTasks, can cover several narrower ones listed for the other role.
Compliance Administrator explained Compliance Data Administrator explained
Spotted something out of date or wrong? Tell us and we'll fix it.