Application Administrator = Can create and manage all aspects of app registrations and enterprise apps. Cloud Application Administrator = Can create and manage all aspects of app registrations and enterprise apps ***except App Proxy***. Service Support Administrator = Can read service health information and manage support tickets. Application Developer = Can create application registrations independent of the 'Users can register applications' setting. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference