Administration Role

Intune – New administration roles available

A new administration role for Intune has been made available – Endpoint Security Manager. This new role is an extension of the the Security Administrator role, to allow you The associated permissions with this new Endpoint Security Manager are: Read, Create, Update, Delete, and Assign Device Compliance Policies Read, Delete, and Update Managed devices Read, […]

Intune – New administration roles available Read More »

Azure AD / Office 365 – 3 new administration roles available

In the way to limit the need and use of the global administrator role, 3 new administration roles have been made available: Groups administrator to delegate groups (Azure AD security groups, Office 365 Groups, Teams or Yammer) management, covering naming convention, expiration policy or even AAD security group restoration Office apps administrator allows you delegating

Azure AD / Office 365 – 3 new administration roles available Read More »

Office 365 – A new administration role is available to delegate administration of Kaizala

You may know Kaizala has been the youngest and latest service added to Office 365, providing phone-based collaboration capabilities. Until then, to manage Kaizala you had to be an Office 365 Global Administrator; well, not anymore, a new administration role is now available to delegate administration of Kaizala without granting global administration: Kaizala admin

Office 365 – A new administration role is available to delegate administration of Kaizala Read More »

Office 365 – You can define Favorites administration roles

As you already know, the Roles page on Office 365 administration portal (https://admin.microsoft.com/) allows you to manage Office 365 roles assigned to your users. Well, you can now define your favorites administration roles (aka the one you use/manage the most) to filter the available roles to only those ones. To set an administration role as

Office 365 – You can define Favorites administration roles Read More »

Exchange Online – A new administration role is being deployed: Quarantine Administrator

This was a missing role since the beginning of Office 365 and Exchange Online to allow the delegation of the administration of the quarantine. Before you had to create your very own Exchange Role with the correct permissions – Mail Recipient, Message Tracking, Transport Hygiene and View-Only Configuration (which was not easy to find as

Exchange Online – A new administration role is being deployed: Quarantine Administrator Read More »

Azure AD / Office 365 – New Global Reader built-in role is coming

It has been a long awaited capability: being able to give a complete read-access only to Azure AD/Office 365 administration. Well good news, a read-only administrative access role is coming – called Global Reader. The deployment will start on September 24 and scheduled to be completed by October. It worth noting that few limitations will

Azure AD / Office 365 – New Global Reader built-in role is coming Read More »

Azure AD – You can now create your own custom administration roles

As you may already know, you can grant administrative access to Azure Active Directory (AAD) and associated resources using built-in administration role. Well, this is going one step further as an update has been deployed on Azure Active Directory which let you create your own custom administration role. During the preview, this capability is available

Azure AD – You can now create your own custom administration roles Read More »

Office 365 / Azure AD – New administration roles available

As Office 365 and Azure AD are evolving, the need for more granular administration role is more and more important. 2 new administration roles have been introduced to reduce the need for more elevated privileges: Information Protection Administrator: to grant all Azure Information Protection (AIP) administration aspects without granting global administrator permission. This covers Azure

Office 365 / Azure AD – New administration roles available Read More »

Azure AD – New administration role available in preview: Authentication Administrators

The long awaited and requested Azure Active Directory (AAD) administrator role is now available in preview: Authentication Administrators. The Authentication Administrators role can manage authentication process for end-user, like manage multi-factor authentication (MFA) requirements for end-users (from activating to revoke the ‘remembering device’). You can manage Authentication Administrators role membership from your Azure AD (either

Azure AD – New administration role available in preview: Authentication Administrators Read More »