What type of roles to assign an account that needs to register an app, create azure resources and have visibility of marketplace results within partner center.

Use separate role assignments for the three work areas, because Microsoft Entra roles, Azure IAM roles, and Partner Center roles are different scopes.

1. For app registrations in Microsoft Entra ID Assign a Microsoft Entra role that can manage app registrations. Supported options in the context:
   • Application Developer
   • Application Administrator
   • Cloud Application Administrator
   Important: Azure subscription roles such as Contributor do not grant permission to manage app registrations or secrets, because app registrations are directory-level objects. Where to assign it
   • Go to Microsoft Entra admin center.
   • Open Entra ID > Roles and administrators.
   • Select the required role.
   • Select Add assignments.
   • Select the user.
   • Select Add.
   If only one specific app registration should be managed, a role can also be assigned at app registration scope:
   • Go to Entra ID > App registrations.
   • Select the application.
   • Select Roles and administrators.
   • Select the role.
   • Select Add assignments.
   • Select the user or group.
   • Select Add.
2. For creation and management of Azure resources Assign an Azure IAM role on the subscription, resource group, or management group. From the context, Azure resource permissions are separate from Entra roles. For Azure resources, use Azure IAM roles such as:
   • Owner
   • Contributor
   • User Access Administrator
   Practical mapping:
   • Contributor: create and manage Azure resources.
   • Owner: create and manage resources and also manage access.
   • User Access Administrator: manage access assignments.
   If the account only needs to deploy and manage resources, Contributor is the minimum fit from the roles listed in the context. If the account must also grant access to others, use Owner or combine with User Access Administrator.
3. For visibility of Marketplace results in Partner Center Assign a Partner Center Marketplace role. From the context:
   • Manager: can access all Microsoft account features except tax and payout settings, and can manage users, roles, and work accounts.
   • Developer: can manage and publish offers and can view some publisher reports.
   For visibility and validation of Marketplace solutions and associated configurations, Manager is the strongest fit in the provided context. Developer is suitable when the user needs to manage and publish offers and view some reports.
4. Where to assign Partner Center roles For Azure Marketplace, Microsoft 365, and Copilot developer programs, role assignment requires an Owner or Manager in Partner Center. Steps:
   • Sign in to Partner Center.
   • Use the account picker to select the relevant seller account.
   • Go to Settings > Account settings > User management.
   • Select the user.
   • Select or clear the required roles.
   • Select Update.
5. Recommended role set for this job Based on the stated scope, assign:
   • Microsoft Entra: Application Administrator or Cloud Application Administrator for app registration management
   • Azure IAM: Contributor for resource creation and management; use Owner if access management is also required
   • Partner Center: Manager for broad Marketplace visibility and configuration access
6. If Application Developer / Cloud Application Administrator / Application Administrator are not visible That usually means the current account does not have the right place or scope open, or lacks permission to assign Entra roles. Use the correct admin path for Entra role assignment:
   • Microsoft Entra admin center > Entra ID > Roles and administrators
   Do not look for those roles in Azure subscription IAM or in Partner Center, because those are different role systems.

References:

• Roles, permissions and workspace access for users
• Manage your Microsoft Marketplace account in Partner Center
• Assign Microsoft Entra roles
• Faced an error related to azure application secret keys, but not able to get appropriate role to solve the issue - Microsoft Q&A
• Unable to add role assignments despite being a Global Administrator." - Microsoft Q&A