I see confusion when it comes to Office 365 administrator roles. Let’s make things clear!
There are following types of admin roles for Office 365:
Administrator type | Functions |
global | can do and has access to everything |
billing | makes purchases, manages subscriptions, manages support tickets, and monitors service health |
password | can only reset user passwords |
user management | resets passwords, monitors service health, adds and deletes user accounts, manages service requests |
service | used to open support tickets with Microsoft; has view only permissions |
Exchange/Skype for Business/SharePoint/Power BI service | manages the respective service |
Admin roles can be assigned to users from the Office 365 portal or via PowerShell.
In the Office 365 portal
- Switch to the admin center.
- Select users > Active users.
- Click Add a user (for new users) or Edit a user (for existing users) > Roles.
- Select the desired admin roles.
This is a screenshot when adding a new user:
Using PowerShell
Add-MsolRoleMember -RoleMemberEmailAddress <String> -RoleName <String>
Example:
Add-MsolRoleMember -RoleMemberEmailAddress “john.doe@itconsultpro.com” -RoleName “SharePoint Service Administrator”
To get the list of all values for the RoleName parameter, use the Get-MsolRole cmdlet.
Add a filter on the results to retrieve only the administrator roles:
Get-MsolRole | Where-Object {$_.Name -like ‘*administrator*’}