Microsoft Surface Hub 2 SmCamera - Manual (Page 252)

prevent potentially unwanted admin access an entire Azure AD domain. To learn more,
see
Configure non-Global Admin accounts on Surface Hub .