question

AdamWood-4563 avatar image
0 Votes"
AdamWood-4563 asked LuDaiMSFT-0289 answered

Custom User Roles - 365 Tenant

Hi all,

I can appreciate the 365 ecosystem has made decent strides in what access roles can be granted to users in a tenant. I'm looking for some assistance with assigning the correct custom roles to achieve the following:

  • Grant a user/s access to amend members of a distribution group - as well as add or remove Owners

  • Grant the same user/s access to amend contact information for user accounts in the tenant

These admins must not be able to access anyone else's mailbox - in other words, they can't be allowed to reset passwords. We're also looking to restrict these admins from being able to view/access other areas of the tenant. They're only allowed to perform the tasks listed above.

It seems that adding Groups Admin permissions is a step in some sort of direction, but what else is missing?

Thanks in advance!



windows-365-business
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@AdamWood-4563 Thanks for posting in our Q&A.

For this issue, it is not related to windows 365. Based on my research, I find that only Global Administrator and User Administrator has the permission to add or delete other users. However, the two roles also have the permission to reset password.

So, it seems that it doesn't make all the requirements. Given this situation, it is suggested to contact Microsoft 365 to double confirm. Here is the support link:
https://docs.microsoft.com/en-us/microsoft-365/business-video/get-help-support?view=o365-worldwide

Hope it will help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.