question

cosyM-1691 avatar image
0 Votes"
cosyM-1691 asked SaurabhSharma-msft commented

Azure AD PIM Access for Groups

Hi,

I have a new administrator starting soon. So can i create a group called PUM-Admin and assign O365 Administrator roles to this group? ( Global/Exchange/ Intune /Security Administrator roles)

What is the best practise for multiple roles?

As

azure-ad-domain-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SaurabhSharma-msft avatar image
0 Votes"
SaurabhSharma-msft answered SaurabhSharma-msft commented

@cosyM-1691 Yes you can assign an administrator role to a group however, this feature is currently in preview and few functionality might change till it goes to GA. You can only assign Azure AD built-in roles to a cloud group. In order to make this feature work, while creating a group on Azure Portal you need to enable "Azure AD roles can be assigned to the group". Also, if you want to use PIM do role assignment then you need to send email to move your organization and update your API as mentioned in the document. Please refer to the same documentation to understand know limitations and issues.


Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@cosyM-1691 Please let me know if you have any other questions. Also, do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

0 Votes 0 ·