In Microsoft Entra Internet Access and Private Access, administrative permissions are controlled through specific Microsoft Entra roles. The SC-300 exam content (module "Manage Microsoft Entra Global Secure Access") identifies that management of Global Secure Access features requires either of these roles:
* Global Administrator, or
* Network Access Administrator
These roles can configure, deploy, and manage settings for both Microsoft Entra Internet Access and Microsoft Entra Private Access in the Microsoft Entra admin center.
From Microsoft Learn:
"To configure and manage Microsoft Entra Internet Access or Private Access, you must be assigned either the Global Administrator or the Network Access Administrator role." Thus, if:
* User1 = Global Administrator
* User2 = Network Access Administrator
* User3 = (Any other role)
Then only User1 and User2 can manage Microsoft Entra Internet Access.