SharePoint Administrator (f28a1f50-f6e7-4571-818b-6a12f2af6b6c)
Can manage all aspects of the SharePoint service.

General:
 - Read and configure Azure Service Health
 - Create and manage Azure support tickets
 - Create and manage OneDrive protection policy in Microsoft 365 Backup
 - Read and configure restore session for OneDrive in Microsoft 365 Backup
 - Create and delete all resources, and read and update standard properties in SharePoint
...
 - Read basic properties on all resources in the Microsoft 365 admin center

Inherits permissions from

Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
Can read basic directory information. Commonly used to grant directory read access to applications and guests.

General:
 - Read members of administrative units
 - Read license details of users
 - Read manager of users
 - Read registered devices of users
 - Read user's membership of a Microsoft Entra role, that is scoped to an administrative unit
 - Read sponsors of users
 ...
 - Read basic properties on users