Configuring Azure AD Join and Azure AD Registration

This recipe shows how to limit the Azure AD Join and Azure AD Registration features for your organization, configuring additional cloud device administrators and allowing Enterprise State Roaming.

Getting ready

To complete this recipe, you'll need to sign into the Azure AD tenant with an account that has the Global administrator role assigned to it.

Configuring additional accounts with local administrator privileges on Azure AD-joined devices and enabling Enterprise State Roaming requires Azure AD Premium P1 licenses, or Microsoft licenses that include the P1 license, such as Azure AD Premium P2, EMS E3, EMS A3, Microsoft 365 E3, or Microsoft 365 Business licenses.

...