Managing admin roles in the Microsoft 365 admin center
In the previous recipe, Assigning the User Administrator admin role in Azure AD, we covered assigning a specific admin role via Azure AD. In this recipe, we'll do the same, but from within the Microsoft 365 admin center.
You must be a global administrator or privileged role administrator to assign other admin roles.
How to do it…
- Go to the Microsoft 365 Admin Center at https://admin.microsoft.com/.
- Select Users > Active users:
- Search or scroll to select the account to which you're assigning the admin role(s). Then, use the ellipses to select Manage roles:
- Select/deselect the role(s) you're assigning or unassigning:
- You'll also notice there's an expandable Show all by category section for more (less common) admin roles not shown in the previous screenshot. These are divided into Collaboration, Devices, Global, Identity, Other, Read-only, and Security & Compliance categories. You can see some of the options in the following screenshot:
- When finished selecting/deselecting, click Save changes. If successful, you'll see Admin roles updated:
How it works…
In this recipe, you assigned the User Admin role via the Microsoft 365 admin center. Like how you'd assign product licenses to users, the Microsoft 365 Admin Center's Active users blade allows you to assign admin roles as well from this singular, central location.
If you try to select more than one user at a time using this method, you will not get the Manage roles option. That's a limitation of the Microsoft 365 Admin Center and one reason you may wish to manage administrator roles using Azure AD instead.
- Learn more about admin roles in the Microsoft 365 Admin Center at https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles.