"User Administrator" Role in Microsoft 365 Print

"User Administrator" Role in Microsoft 365

The User Administrator role in Microsoft 365 allows for the management of user accounts without granting full access to global settings. It is designed for operational tasks while maintaining security and limiting administrative scope.

Main permissions

• Create and edit user accounts
• Reset user passwords
• Assign or remove Microsoft 365 licenses
• Manage security groups and Microsoft 365 groups

Role limitations

• Cannot modify global tenant settings
• Cannot manage higher-level administrative roles

This is the ideal role for individuals responsible for day-to-day user management, offering essential permissions while preserving system security and role separation.

How to assign the User Administrator role

1. Go to the admin portal at admin.microsoft.com and sign in with administrator credentials.
2. Click on “Show all” in the left-hand menu.
3. Navigate to “Roles”, then select “Role Assignments”.
4. From the list, choose “User Administrator”.
5. Click “Assign admins”.
6. In the next screen, click “Add users” and select the person you want to assign the role to.
7. Complete the action by clicking “Add” at the bottom right.