Office 365 admin roles

 

I see confusion when it comes to Office 365 administrator roles. Let’s make things clear!

There are following types of admin roles for Office 365:

Administrator type Functions
global can do and has access to everything
billing makes purchases, manages subscriptions, manages support tickets, and monitors service health
password can only reset user passwords
user management resets passwords, monitors service health, adds and deletes user accounts, manages service requests
service used to open support tickets with Microsoft; has view only permissions
Exchange/Skype for Business/SharePoint/Power BI service manages the respective service

Admin roles can be assigned to users from the Office 365 portal or via PowerShell.

In the Office 365 portal

  1. Switch to the admin center.
  2. Select users > Active users.
  3. Click Add a user (for new users) or Edit a user (for existing users) > Roles.
  4. Select the desired admin roles.

This is a screenshot when adding a new user:

adduser

Using PowerShell

Add-MsolRoleMember -RoleMemberEmailAddress  <String> -RoleName <String>

Example:

Add-MsolRoleMember -RoleMemberEmailAddress  “john.doe@itconsultpro.com” -RoleName “SharePoint Service Administrator”

 

To get the list of all values for the RoleName parameter, use the Get-MsolRole cmdlet.

Add a filter on the results to retrieve only the administrator roles:

Get-MsolRole | Where-Object {$_.Name -like ‘*administrator*’}