As a Tenant Administrator, you are assigned the following roles:
-
assign_roles
-
manage_users
-
read_users
You can then assign roles to your users including all of the above roles in addition to the manage_apps role which allows users to create or revoke application credentials.
The following pages detail the functions available to you as a Tenant Administrator.