分配管理员角色Assign admin roles

如果你是购买 Microsoft 商业订阅的人员,则是全局管理员。这意味着您对订阅中的产品具有无限制的控制,并且您可以访问大多数数据。If you're the person who purchased your Microsoft business subscription, you are the global admin. This means you have unlimited control over the products in your subscriptions and you can access most data.

有关详细信息,请参阅关于管理员角色For more information, see About admin roles.

当您添加新用户时,如果您不向他们分配管理员角色,则他们处于 用户角色 中,并且对任何 Microsoft 管理中心都没有管理员权限。When you add new users, if you don't assign them an admin role then they are in the user role and don't have admin privileges to any of the Microsoft admin centers. 但是,如果您需要帮助完成操作,则可以向用户分配管理员角色。But if you need help getting things done, you can assign an admin role to a user. 例如,如果您需要某人帮助重置密码,则不应为他们分配全局管理员角色,应为他们分配密码管理员角色。For example, if you need someone to help reset passwords, you shouldn't assign them the global admin role, you should assign them the password admin role. 拥有过多的全局管理员(对数据和联机业务的无限制访问权限)是一种安全风险。Having too many global admins, with unlimited access to your data and online business, is a security risk.

手表:添加管理员。Watch: Add an admin.

如果你觉得这段视频有用,请查看适用于小型企业和 Microsoft 365 新手的完整培训系列If you found this video helpful, check out the complete training series for small businesses and those new to Microsoft 365.

分配管理员角色Assign admin roles

您可以通过两种不同的方式为用户分配角色:You can assign users to a role in 2 different ways:

  • 您可以转到用户的详细信息并 管理角色 以向用户分配角色。You can go to the user's details and Manage roles to assign a role to the user.
  • 或者,您可以转到 " 角色 " 并选择角色,然后向其中添加多个用户。Or you can go to Roles and select the role, and then add multiple users to it.

使用角色为用户分配管理员角色Assign admin roles to users using Roles

  1. 在管理中心中,转到 角色 > 角色 以查看适用于您的组织的所有管理员角色。In the admin center, go to Roles > Roles to view all of the admin roles available for your organization.
  2. 选择要向其分配用户的管理员角色。Select the admin role that you want to assign the user to.
  3. 选择 " 分配的管理员 > 添加 "。Select Assigned admins > Add.
  4. 键入用户的 显示名称用户名 ,然后从建议列表中选择用户。Type the user's display name or username , and then select the user from the list of suggestions.
  5. 在完成之前,请添加多个用户。Add multiple users until you're done.
  6. 选择 " 保存 ",然后将用户添加到分配的管理员列表中。Select Save , and then the user will be added to the list of assigned admins.

将用户分配给活动用户的管理员角色Assign a user to an admin role from Active users

  1. 在管理中心,转到 " 用户 > 活动用户 " 页。In the admin center, go to Users > Active users page.

  2. 在 " 活动用户 " 页上,选择要更改其管理员角色的用户。On the Active users page, select the user whose admin role you want to change. 在浮出控件窗格中,在 " 角色 " 旁边,选择 " 管理角色 "。In the flyout pane, next to Roles , select Manage roles.

  3. 选择要分配给用户的管理员角色。Select the admin role that you want to assign to the user. 如果看不到您要查找的角色,请选择列表底部的 " 全部显示 "。If you don't see the role you're looking for, select Show all at the bottom of the list.

  1. 在管理中心,转到“ 用户 ”>“ 活动用户”页面。In the admin center, go to the Users > Active users page.

  2. 在 " 活动用户 " 页上,选择要更改其管理员角色的用户。On the Active users page, select the user whose admin role you want to change. 在浮出控件窗格中,单击 " 角色 " 旁边的 " 编辑 "。In the flyout pane, next to Roles , select Edit.

    如果看不到 " 编辑 " 选项,则无权编辑,也不能将管理员角色分配给其他人。If you don't see the Edit option, then you don't have a permission to edit and can't assign admin roles to other people. 请求企业中的全局管理员为您分配角色。Ask a global admin in your business to assign roles for you. 在小型企业中,企业所有者 (购买订阅的人) 是全局管理员。在大型企业中,IT 部门的关键人员是全局管理员。In a small business, the business owner (the person who purchased your subscription) is a global admin. In a large business, key people in the IT department are global admins.

  3. 选择 " 自定义管理员 " 查看我们为你自定义的角色的列表。Select Customized administrator to see a list of roles we've customized for you. 有关每个角色的说明,请参阅 关于管理员角色。For a description of each role, see About admin roles.

  1. 在管理中心,转到“ 用户 ”>“ 活动用户”页面。In the admin center, go to the Users > Active users page.

  2. 在 " 活动用户 " 页上,选择要更改其管理员角色的用户。On the Active users page, select the user whose admin role you want to change. 在浮出控件窗格中,单击 " 角色 " 旁边的 " 编辑 "。In the flyout pane, next to Roles , select Edit.

    如果看不到 " 编辑 " 选项,则无权编辑,也不能将管理员角色分配给其他人。If you don't see the Edit option, then you don't have a permission to edit and can't assign admin roles to other people. 请求企业中的全局管理员为您分配角色。Ask a global admin in your business to assign roles for you. 在小型企业中,企业所有者 (购买订阅的人) 是全局管理员。在大型企业中,IT 部门的关键人员是全局管理员。In a small business, the business owner (the person who purchased your subscription) is a global admin. In a large business, key people in the IT department are global admins.

  3. 选择 " 自定义管理员 " 查看我们为你自定义的角色的列表。Select Customized administrator to see a list of roles we've customized for you. 有关每个角色的说明,请参阅 关于管理员角色。For a description of each role, see About admin roles.

向多个用户分配管理员角色Assign admin roles to multiple users

如果你知道 PowerShell,请参阅 使用 powershell 向用户帐户分配角色If you know PowerShell, see Assign roles to user accounts with PowerShell. 它非常适合为数百个用户分配角色。It's ideal for assigning roles to hundreds of users.

请按照以下说明向数十个用户分配角色。Use the following instructions to assign roles to tens of users.

检查组织中的管理员角色Check admin roles in your organization

您可能没有将管理员角色分配给其他用户的正确权限。You might not have the correct permissions to assign admin roles to other users. 请进行检查以确保您具有正确的权限,或者让其他管理员为您分配角色。Check to make sure you have the correct permissions or ask another admin to assign roles for you.

您可以通过两种不同的方式检查管理员角色权限:You can check admin role permissions in 2 different ways:

  • 您可以转到用户的详细信息,并在 " 帐户 " 页上的 " 角色 " 中查看。You can go to the user's details and look under Roles on the Account page.
  • 或者,您可以转到 " 角色 " 并选择 "管理员" 角色,然后选择 "分配的管理员" 来查看分配了哪些用户。Or you can go to Roles and select the admin role, and select assigned admins to see which users are assigned.

关于 Microsoft 365 管理员角色About Microsoft 365 admin roles

Azure Active Directory 中的管理员角色权限Administrator role permissions in Azure Active Directory

使用 PowerShell 向用户帐户分配角色Assign roles to user accounts with PowerShell

授权或删除合作伙伴关系Authorize or remove partner relationships