Select what tasks an admin needs to perform and get the least-privilege Microsoft 365 / Entra ID role recommendation - no more assigning Global Admin by default.
🔒 Runs entirely in your browser - no data sent anywhere
Tick all tasks that apply. The tool will recommend the minimum role(s) needed.
Recommended Roles
Role Details
⚠️
Principle of least privilege: Always assign the most specific role that covers only the required tasks. Avoid Global Administrator except for genuine break-glass or emergency scenarios. Use Entra ID PIM to make privileged roles time-bound and require justification.
// need help with intune or m365?
Fixed-price Intune setup for UK businesses
I offer fixed-price Intune and M365 consulting for UK small businesses - no day rate, no scope creep. Get a fully configured, documented setup handed back to you.