Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Microsoft  Office 365 Administration Cookbook

You're reading from   Microsoft Office 365 Administration Cookbook Enhance your Office 365 productivity with recipes to manage and optimize its apps and services

Arrow left icon
Product type Paperback
Published in Sep 2020
Publisher Packt
ISBN-13 9781838551230
Length 442 pages
Edition 1st Edition
Languages
Arrow right icon
Author (1):
Arrow left icon
Nate Chamberlain Nate Chamberlain
Author Profile Icon Nate Chamberlain
Nate Chamberlain
Arrow right icon
View More author details
Toc

Table of Contents (16) Chapters Close

Preface 1. Chapter 1: Office 365 Setup and Basic Administration 2. Chapter 2: Office 365 Identity and Roles FREE CHAPTER 3. Chapter 3: Administering Office 365 with PowerShell 4. Chapter 4: Managing Exchange Online 5. Chapter 5: Setting Up and Configuring Microsoft Search 6. Chapter 6: Administering OneDrive 7. Chapter 7: Configuring the Power Platform 8. Chapter 8: Administering SharePoint Online 9. Chapter 9: Managing Microsoft Teams 10. Chapter 10: Configuring and Managing Users in Azure Active Directory (Azure AD) 11. Chapter 11: Understanding the Microsoft 365 Security & Compliance Center 12. Chapter 12: Deploying Data Loss Prevention and eDiscovery 13. Chapter 13: Monitoring Office 365 Apps and Services 14. Chapter 14: Appendix – Office 365 Subscriptions and Licenses
15. Other Books You May Enjoy

Assigning the User Administrator admin role in Azure AD

User management is usually assigned to helpdesk resources, and not a global admin. This recipe outlines the steps to assigning user management admin roles to users. This role provides its members an appropriate level of permission to manage users, but not all the access and abilities granted to the global admin role. Let's assign the User Administrator admin role to a user.

Getting ready

You'll need access to Azure AD and the Global administrator or Privileged Role administrator role to assign other admin roles.

How to do it…

  1. Go to Azure AD at https://aad.portal.azure.com.
  2. Select Azure Active Directory from the left navigation menu:
    Figure 2.35 – Azure Active Directory highlighted in the left-hand 
navigation menu in the Azure AD admin center

    Figure 2.35 – Azure Active Directory highlighted in the left-hand navigation menu in the Azure AD admin center

  3. Select Roles and administrators from beneath the Manage header:
    Figure 2.36 – Roles and administrators highlighted in the Manage section

    Figure 2.36 – Roles and administrators highlighted in the Manage section

  4. Search or scroll the list until you locate User administrator, then select it:
    Figure 2.37 – User administrator role highlighted in Administrative roles search results

    Figure 2.37 – User administrator role highlighted in Administrative roles search results

  5. Select Add assignments:
    Figure 2.38 – Add assignments option in the Assignments screen of the User administrator role details

    Figure 2.38 – Add assignments option in the Assignments screen of the User administrator role details

  6. Select each shared service account or individual user you want added to this role group. The search bar can help find specific accounts more quickly. When finished, select Add:
    Figure 2.39 – Selected users being added to an admin role in Azure AD

    Figure 2.39 – Selected users being added to an admin role in Azure AD

  7. You may now exit Azure AD:
Figure 2.40 – The confirmation notification that appears once users are successfully assigned

Figure 2.40 – The confirmation notification that appears once users are successfully assigned

How it works…

You've just used Azure AD to assign the User Administrator admin role. Users and accounts assigned to the user management role can reset passwords, create and manage users and groups, filter and manage service requests, and monitor service health. Azure AD is the preferred method of assigning roles because you can assign to multiple accounts at once. As you'll see in the next recipe, the Microsoft 365 Admin Center only allows one account to be assigned at a time.

Tip

Use shared service accounts (for example, [email protected]) to minimize the administrative tasks involved during employee turnover and onboarding.

See also

You have been reading a chapter from
Microsoft Office 365 Administration Cookbook
Published in: Sep 2020
Publisher: Packt
ISBN-13: 9781838551230
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image