From Microsoft Corporation:
“The SharePoint admin center will soon support the global reader admin role. Users who are assigned this role will have read-only access to all info and settings in the new SharePoint admin center. This feature is related to the global admin role introduced in MC191391 (September 2019).
•We’ll be gradually rolling this out to Targeted Release customers in mid-February 2020.
•We’ll be gradually rolling this out to production and GCC in early March 2020.
•The roll out will be complete by the end March 2020.
This message is associated with Microsoft 365 Roadmap ID 59984.
How does this affect me?
Global reader is the read-only counterpart to the global admin role to help reduce the number of global admins in your organization. Because global admin accounts are powerful and vulnerable to attack, we recommend that you have fewer than five global admins.
•Assign the global reader role instead of the global admin role to users who need to view all your organization’s settings but not edit them. For example, to plan, audit, or investigate.
•Use the global reader role in combination with other limited admin roles like the SharePoint admin role to allow specialists to perform admin tasks.
What do I need to do to prepare for this change?
To get the most value from this new feature, we suggest that you identify the admins in your organization who should have the global reader role assigned to them. For example:
•Remove the global admin role and assign global reader, and any other essential limited roles, to individuals and admins who can complete their tasks with only the global reader role or the role in combination with limited admin roles like SharePoint admin or user admin.
•Assign the global reader role to individuals in your organization who don’t have admin center access today and are dependent on coworkers for getting the administrative information they need for their work.”
To learn more, ask QuixTec about Admin role permissions in Azure AD.