Default platform user groups
Default platform user groups are assigned predefined roles based on key job responsibilities in Cloud Commander: Administrators, Technicians, and License Administrators. Additionally, you can create your own platform groups to match job responsibilities at your organization.
You add users to platform groups depending on what the users will do in Cloud Commander. The scopes of the default platform groups automatically expand to include new customer tenants as they are set up in Cloud Commander.
CC Admins
Members of the CC Admins group can manage Cloud Commander platform roles and groups, manage Microsoft Entra ID users, Exchange Online, and Teams, as well as view the Cloud Commander command logs.
The following roles are assigned to the CC Admins group:
- Audit Administrators
- Azure Management Resource Admin
- Command Block Job Log Reader
- Identity and Access roles and permissions
- Identity and Access Essentials Reader
- Identity and Access Essentials Writer
- License Administrators
- Microsoft Entra ID Group Administrators
- Microsoft Exchange Online roles and permissions
- Microsoft Exchange Online Reader
- Microsoft Exchange Online Writer
- Microsoft Teamwork roles and permissions
- Microsoft Teams Reader
- Microsoft Teams Writer
- Partner Center Administrators
- Platform (category) roles and permissions
- Administrators
- Command Platform Role Reader
- Command Platform Role Writer
- Role Administrators
- User Administrators
- User Group Administrators
- Users Reader
CC Technicians
Members of the CC Technicians group can manage Microsoft Entra ID users, devices, Teams, Exchange, and SharePoint, as well as view Microsoft reports and the Cloud Commander audit logs.
The following roles are assigned to the CC Technicians group:
- Azure Management Resource Admin
- Command Block Job Log Reader
- Microsoft Entra ID Group Administrators
- Identity and Access roles and permissions
- Identity and Access Essentials Writer
- Identity Protection Writer
- Microsoft Entra ID Authentication Methods Writer
- Microsoft Entra ID Domains Writer
- Microsoft Entra ID Organization Writer
- Microsoft Entra ID Role Writer
- Microsoft Entra Writer
- License Administrators
- Microsoft Endpoint Manager roles and permissions
- Microsoft Endpoint Manager Device Configuration and Policies Reader
- Microsoft Endpoint Manager Device Configuration and Policies Writer
- Microsoft Endpoint Manager Device Reader
- Microsoft Endpoint Manager Device Writer
- Microsoft Exchange Online roles and permissions
- Microsoft Exchange Online Reader
- Microsoft Exchange Online Writer
- Microsoft Partner Center roles and permissions
- Partner Center Customer Reader
- Partner Center Customer Writer
- Microsoft Graph Security roles and permissions
- Microsoft Security Alerts Writer
- Microsoft Threats Assessments Writer
- Microsoft SharePoint roles and permissions
- Microsoft OneDrive for Business Reader
- Microsoft OneDrive for Business Writer
- Microsoft SharePoint Online Reader
- Microsoft SharePoint Online Writer
- Microsoft Windows 365 Reader
- Microsoft Windows 365 Writer
- Microsoft Teamwork roles and permissions
- Microsoft Teams Reader
- Microsoft Teams Writer
- Platform (category) roles and permissions
- Report Essentials Reader
- User Administrators
- Users Reader
CC License Admins
Members of the CC License Admins group can manage subscriptions and renewals, view license availability, and assign licenses to Entra ID users.
The following roles are assigned to the CC License Admin group:
- Identity and Access Essentials Reader
- License Administrators
- Microsoft Partner Center roles and permissions
- Partner Center Customer Reader
- Partner Center Customer Writer
- Subscriptions and licenses roles and permissions
- Product and Subscription Management
- Subscription Management
Default platform user group comparison
| Platform Role | CC Admins | CC Technicians | CC License Admins |
|---|---|---|---|
| Administrators |
|
|
|
| Partner Center Administrators |
|
|
|
| Command Platform Role Writer |
|
|
|
| Command Platform Role Reader |
|
|
|
| Role Administrators |
|
|
|
| User Group Administrators |
|
|
|
| Command Block Job Log Reader |
|
|
|
| Microsoft Entra ID Group Administrators |
|
|
|
| Identity and Access Essentials Writer |
|
|
|
| Identity and Access Essentials Reader |
|
|
|
| Audit Administrators |
|
|
|
| User Administrators |
|
|
|
| Users Reader |
|
|
|
| Microsoft Entra ID Authentication Methods Writer |
|
|
|
| Microsoft Entra ID Domains Writer |
|
|
|
| Microsoft Entra ID Organization Writer |
|
|
|
| Microsoft Entra Role Writer |
|
|
|
| License Administrators |
|
|
|
| Azure Management Resource Admin |
|
|
|
| Microsoft Entra Writer |
|
|
|
| Microsoft OneDrive for Business Reader |
|
|
|
| Microsoft OneDrive for Business Writer |
|
|
|
| Microsoft SharePoint Online Writer |
|
|
|
| Microsoft SharePoint Online Reader |
|
|
|
| Microsoft Exchange Online Reader |
|
|
|
| Microsoft Exchange Online Writer |
|
|
|
| Microsoft Teams Reader |
|
|
|
| Microsoft Teams Writer |
|
|
|
| Microsoft Endpoint Manager Device Reader |
|
|
|
| Microsoft Endpoint Manager Device Writer |
|
|
|
| Microsoft Endpoint Manager Device Configuration And Policies Reader |
|
|
|
| Microsoft Endpoint Manager Device Configuration And Policies Writer |
|
|
|
| Microsoft Windows 365 Writer |
|
|
|
| Microsoft Windows 365 Reader |
|
|
|
| Identity Protection Writer |
|
|
|
| Microsoft Secure Scores Writer |
|
|
|
| Microsoft Secure Scores Reader |
|
|
|
| Partner Center Customer Writer |
|
|
|
| Partner Center Customer Reader |
|
|
|
| Microsoft Threat Assessments Writer |
|
|
|
| Microsoft Security Alerts Writer |
|
|
|
| Azure Management Resource Writer |
|
|
|
| Report Essentials Reader |
|
|
|
| Product and Subscription Administrators |
|
|
|
| Subscription Management |
|
|
|
Related articles
Updated: Aug 01, 2025