In Microsoft Entra Permissions Management (formerly CloudKnox), the Permissions Management Administrator role provides the least-privilege rights necessary to onboard cloud environments such as Azure subscriptions, AWS accounts, or GCP projects. This role allows users to configure data collection and onboard environme nts without granting global administrative access.
The Global Administrator role could also perform onboarding but exceeds the least-privilege requirement.
Microsoft's official documentation (SC-300 "Manage Microsoft Entra Permissions Management" module) c learly states:
"The Permissions Management Administrator can onboard and configure environments for Permissions Management and manage discovery and insights across multi-cloud platforms."