Configure and manage Azure AD roles
Configure delegation by using administrative units
Analyze Azure AD role permissions
Configure and manage custom domains
Configure tenant-wide settings
Create, configure, and manage users
Create, configure, and manage groups
Configure and manage device join and registration, including writeback
Assign, modify, and report on licenses
Manage external collaboration settings in Azure AD
Invite external users, individually or in bulk
Manage external user accounts in Azure AD
Configure identity providers, including SAML or WS-fed
Implement and manage Azure AD Connect
Implement and manage Azure AD Connect cloud sync
Implement and manage Password Hash Synchronization (PHS)