This chapter requires that users possess administrative privileges within Microsoft 365. Individuals holding the Global Administrator role will have the ability to execute all tasks detailed in each recipe. Meanwhile, administrators assigned to specific applications or functions within the platform will find that they can perform a vast majority of the tasks outlined, and it will be noted when other roles may perform a function. There are no installations or downloads required to follow along with the recipes in this chapter.

Setting up a new user in Microsoft 365 is an important task for administrators, enabling new employees or team members to access essential Microsoft services. In this recipe, you’ll create a single new user in your organization via the Microsoft 365 admin center.

Getting ready

You need access to the Microsoft 365 admin center with a user role that allows you to add and configure new users, such as Global Administrator or User Administrator.

How to do it…

1. Access the Microsoft 365 admin center by navigating to https://admin.microsoft.com.
2. In the admin center, navigate to Users | Active users, then select Add a user, as shown in Figure 2.1.

Figure 2.1 – Steps to add a user in the Microsoft 365 admin center

3. On the Set up the basics screen that appears, enter the user’s name, display name, and username. Also, specify the domain for the user’s account.

Note

The default...

When setting up multiple users at once in Microsoft 365, importing users in bulk streamlines the administrative workload. This process involves preparing and uploading a formatted CSV file containing user details. This recipe will guide you through the steps involved. Check the There’s more… section to learn about using the wizard to add multiple users instead.

Getting ready

Ensure you have administrative access to the Microsoft 365 admin center as a Global Administrator or User Administrator.

How to do it…

1. Sign in to the Microsoft 365 admin center at https://admin.microsoft.com.
2. Navigate to Users | Active users, then select Add multiple users, as shown in Figure 2.5.

Figure 2.5 – Location of Add multiple users option

3. On the Add multiple users screen, scroll down and select I’d like to upload a CSV with user information, then download the sample CSV file of your choice...

Creating a group in Microsoft 365 allows you to manage email distribution, sharing permissions, and collaboration spaces efficiently across a set of users who have common interests. For example, you might create new Microsoft 365 groups for newly formed committees, departments, processes such as onboarding, or even groups with a social purpose, such as a company book club. These newly created groups will have access to a team in Microsoft Teams, the SharePoint site that supports the team, a notebook, a mailbox and calendar in Outlook, and more to help them collaborate and communicate throughout the life cycle of their objectives.

Getting ready

Many administrative roles, including Global Administrator, Groups Administrator, User Administrator, Teams Administrator, SharePoint Administrator, and Exchange Administrator, have the ability to create groups. For this recipe, you’ll need an administrative role with access to the Microsoft 365...

Security defaults are preconfigured rules that include commonly configured security features, such as requiring MFA. Enabling security defaults is crucial for protecting your Microsoft 365 environment against common security risks to Microsoft 365, such as phishing or other identity-related attacks, by enforcing secure authentication methods recommended by Microsoft.

Getting ready

To enable security defaults, you need to have administrative privileges in the Microsoft 365 admin center. It’s recommended to have the Security Administrator or Global Administrator role.

How to do it…

1. Sign in to the Microsoft Entra admin center by navigating to https://entra.microsoft.com or by selecting Identity from the list of admin centers in the Microsoft 365 admin center at https://admin.microsoft.com.
2. In the navigation pane, go to Identity | Overview | Properties, as shown in Figure 2.16.

Exporting user data in Microsoft 365 can be essential for audits, compliance, reporting, or management purposes. This process allows you to generate and download reports that detail user activities, licensing, and other attributes.

Getting ready

Ensure you have administrative privileges to access the Microsoft 365 admin center with an assigned role such as Global Administrator, Global Reader, or Reports Reader in order to perform these actions.

How to do it…

1. Sign in to the Microsoft 365 admin center at https://admin.microsoft.com and go to the Reports | Usage section. Note that this might be under Show all if you don’t see it immediately. This area provides a variety of reports related to user activities and service usage, as seen in Figure 2.18.

Figure 2.18 – Usage reports in the Microsoft 365 admin center

2. Choose the specific report you are interested in, such as the Active users report, by...

Managing guest users in Microsoft 365 allows organizations to collaborate securely with individuals outside their organization, such as partners, vendors, or consultants. These external users can be given access to various resources, such as Microsoft Teams and SharePoint, without being part of your organization’s official directory.

Important note

Guests do not need a Microsoft 365 license to use Teams’ and SharePoint’s collaboration features. Other Microsoft 365 applications, however, may require licensing.

Getting ready

To manage guest users, you need appropriate administrative privileges in the Microsoft 365 admin center with a role such as Global Administrator or User Administrator.

How to do it…

1. Navigate to the Microsoft 365 admin center at https://admin.microsoft.com and select Show all | Settings | Org settings.
2. Under the Services tab, select Microsoft 365 Groups.
3. In the side panel that appears...

Creating a user template in Microsoft 365 helps streamline the process of adding new users by predefining a set of properties that can be applied to multiple users. This is especially useful for onboarding employees in similar roles or departments efficiently and consistently.

Getting ready

Ensure you have administrative access to the Microsoft 365 admin center. User templates can only be created and managed by users with appropriate admin roles, such as a Global Administrator or User Administrator.

How to do it…

1. Sign in to the Microsoft 365 admin center at https://admin.microsoft.com.
2. Navigate to Users | Active users, then select User templates near the top of the page, as shown in Figure 2.26.

Figure 2.26 – Location of the User templates option in the Microsoft 365 admin center

3. Select Add template to create a new template. This opens a side panel wizard where you can enter the template...

In organizations utilizing Microsoft 365, administrators might need to restrict user capabilities to ensure data security and compliance. One such administrative control involves preventing non-admin users from creating new groups. This recipe provides a step-by-step guide on how to set up these restrictions.

Getting ready

Before you begin, ensure you have administrative access to the Microsoft 365 admin center as either Global Administrator or User Administrator. You must also be assigned a Microsoft Entra ID Premium P1 or P2 license. These licenses build upon the basic Entra ID Free license, offering expanded capabilities, such as enhanced control over user verification methods (beyond just the Authenticator app) and the activation of Conditional Access policies (P1) and Risk-based Conditional Access policies (P2).

How to do it…

1. First, we must create a security group of individuals who will be allowed...

Assigning the Microsoft 365 User Administrator role is essential for delegating user management tasks. The User Administrator role allows designated individuals to create and manage users, reset passwords, and manage user licenses without having full Global Administrator privileges.

Getting ready

Ensure you have access to the Microsoft 365 admin center with the Global Administrator role to be able to assign roles to other users.

How to do it…

1. Sign in to the Microsoft 365 admin center at https://admin.microsoft.com.
2. From the left navigation pane, select Users | Active users.
3. Choose the user to whom you want to assign the User Administrator role.
4. In the side panel that appears, within the user’s Account tab, select Manage roles under the Roles header, as shown in Figure 2.33.

Figure 2.33 – Steps to manage roles for a user in the Microsoft 365 admin center

5. Select...

Managing administrative roles in the Microsoft 365 admin center helps in maintaining security and ensuring that the right individuals have the appropriate access to perform their roles efficiently. This guide will walk you through the process of managing admin roles, helping you to delegate responsibilities securely within your organization.

Getting ready

To manage admin roles, you must have the Global Administrator or Privileged Administrator role assigned. Make sure you are signed in to the Microsoft 365 admin center with the appropriate permissions.

How to do it…

1. Go to the Microsoft 365 admin center at https://admin.microsoft.com.
2. In the left navigation pane, select Show all | Roles | Role assignments to view the list of roles and descriptions, as shown in Figure 2.35.

Figure 2.35 – Role assignments screen of the Microsoft 365 admin center

3. Select the name...