If you're the person who purchased your Microsoft business subscription, you are the global admin. This means you have unlimited control over the products in your subscriptions and you can access most data.
When you add new users, if you don't assign them an admin role then they are in the user role and don't have admin privileges to any of the Microsoft admin centers. But if you need help getting things done, you can assign an admin role to a user. For example, if you need someone to help reset passwords, you shouldn't assign them the global admin role, you should assign them the password admin role. Having too many global admins, with unlimited access to your data and online business, is a security risk.
Assign admin roles to a user from the old admin center
We've got a new roles experience that started rolling out in June. Want to try it out? See Assign admin roles to a user from the new admin center.
- In the admin center, go to the Users > Active users page.
On the Active users page, select the user whose admin role you want to change. In the flyout pane, next to Roles, select Edit.
If you don't see the Edit option, then you don't have a permission to edit and can't assign admin roles to other people. Ask a global admin in your business to assign roles for you. In a small business, the business owner (the person who purchased your subscription) is a global admin. In a large business, key people in the IT department are global admins.
Select Customized administrator to see a list of roles we've customized for you. For a description of each role, see About admin roles.
Assign admin roles to a user from the new admin center
This new roles experience is rolling out to organizations starting at the end of June. If you aren't seeing the new Roles page, see Assign admin roles from the old admin center earlier in this article.
In the new admin center, you can assign users to a role in 2 different ways:
- You can go to the user's details and Manage roles to assign a role to the user.
- And you can now go to Roles and select the role, and then add multiple users to it.
Assign admin roles to users (New Roles experience)
- In the admin center, go to Roles > Roles to view all of the admin roles available for your organization.
- Select the admin role that you want to assign the user to.
- Select Assigned admins > Add.
- Type the user's display name or username, and then select the user from the list of suggestions.
- Add multiple users until you're done.
- Select Save, and then the user will be added to the list of assigned admins.
Assign a user to an admin role from Active users
In the admin center, go to Users > Active users page.
On the Active users page, select the user whose admin role you want to change. In the flyout pane, next to Roles, select Manage roles.
Select the admin role that you want to assign to the user. If you don't see the role you're looking for, select Show all at the bottom of the list.
More info about admin role settings
In the Alternative email address box, type an email address that is not connected to an Office 365 or Microsoft 365 subscription. This email address is used for important notifications, including resetting the password for your admin account, so the person must be able to access this email account if they get locked out of their Microsoft account.
If you don't want to receive product-related communications at this alternate email address, change your contact preferences on the About me page. For more information, see Change your contact preferences.
Select Save > Close.
Select More options (...), and then choose Edit contact information.
In the Mobile phone box, type the number of a mobile phone—including the country code if the user has one—that can receive a text (SMS) message. This phone number is also used when you reset your password for your admin account. You need a mobile phone that's capable of receiving text messages for password reset only if one or both of the following applies to you:
Your organization has a custom domain that you've set up to use with your account.
Your user accounts are synchronized through directory synchronization.
When you have finished, select Save.
Assign admin roles to multiple users
If you know PowerShell, see Assign roles to user accounts with PowerShell. It's ideal for assigning roles to hundreds of users.
Use the following instructions to assign roles to tens of users.
Didn't work for you?
You might not have the correct permissions and so you don't have access to assign admin roles to other users. Ask another admin to assign roles for you.
If you still need help, please open a service request at https://www.bemopro.com/sr