Global administrator

Also known as: Global Administrator, Global Admin

Global Administrator is the Microsoft Entra admin role with access to every administrative feature in the tenant, including giving admin consent to apps for the whole organization.

When the admin consent workflow is turned on in your tenant, users who sign in to Rencore Governance for the first time can see a consent prompt. A global administrator then signs in once and consents on behalf of the organization.

Do not use a Global Administrator for the Power Platform consent. Microsoft does not let accounts with this role use the Power Platform Administrator APIs, so the scan fails or returns incomplete data.

For example, Microsoft hides user names in its Microsoft 365 usage reports by default. A Global Administrator can turn this off for the tenant, so the affected objects in Rencore Governance show names instead of codes.

Global Administrator is a directory role in the Entra ID inventory. A report on that role lists who holds it, and the policy template Global administrators without MFA flags holders without multifactor authentication.