| author | CecilyK |
|---|---|
| ms.topic | include |
Important
In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role with a supported role permission. The following privileged roles are supported for this operation.
- Attribute Assignment Reader
- Attribute Definition Reader
- Attribute Assignment Administrator
- Attribute Definition Administrator
By default, Global Administrator and other administrator roles don't have permissions to read, define, or assign custom security attributes.