question

jammedherbs avatar image
0 Votes"
jammedherbs asked ·

Azure AD Users MFA Settings - Global Admins only ?

Hi,

Am I right in believing that only GAs can modify MFA settings for users ?

I tried experimenting with some of the recently added roles, but still couldn't find one that gave the appropriate rights.

Thanks...

azure-active-directory
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
1 Vote"
michev answered ·

Yup, global admins. Authentication admins can reset MFA details for regular, but not change them: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#authentication-administrator
Privileged auth admins can do the same, for any user.

We should eventually get a role or API permission that allows this, but for the moment you need GA.

· 1 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the clarification, that's what I thought.


Let's hope the new role materialises soon :-)


0 Votes 0 · ·