Accessing and Managing User Roles in Microsoft Admin Center

In order to assign admin roles to users you need to be a Global admin on the tenant.

When you add new users, if you don't assign them an admin role then they are in the user role and don't have admin privileges to any of the Microsoft admin centers.

You can assign an admin role to a user. For example, if you need someone to help reset passwords, you shouldn't assign them the global admin role, you should assign them the password admin role. Having too many global admins, with unlimited access to your data and online business, is a security risk.

1. On the Active users page, Click on the user's name whose admin role you want to change. In the flyout pane, under account, click Manage Roles

1.  

   If you don't see the Edit option, then you don't have a permission to edit and can't assign admin roles to other people. Ask a global admin in your business to assign roles for you. 

2. Select the admin role you want the user to have from the list of roles.