Manage licenses in Azure AD
Create administrative units
Manage user and group properties
Manage device settings and device identity
Configure self-service password reset
Create custom role-based access control (RBAC) and Azure AD roles
Provide access to Azure resources by assigning roles at different scopes
Interpret access assignments
Configure and manage Azure Policy
Apply and manage tags on resources