Overview
This article provides step-by-step instructions for:
- Creating a Microsoft 365 administrative account (example: b-meliza@companyname.com)
- Assigning a Microsoft 365 license
- Adding the account as an Eligible Global Administrator through Microsoft Entra Privileged Identity Management (PIM)
Using PIM ensures administrative privileges are granted only when needed, following Microsoft's security best practices and the principle of least privilege.
Prerequisites
Before proceeding, ensure you have:
- Global Administrator or Privileged Role Administrator permissions
- Microsoft Entra ID P2 licensing (required for PIM)
- An available Microsoft 365 license for the new user
Step 1: Create the Microsoft 365 Account
Access the Microsoft 365 Admin Center
Open the Microsoft 365 Admin Center:
Create the User Account
- Navigate to Users → Active users.
- Select Add a user.
- Populate the account details.
Assign a License
- Select the appropriate Microsoft 365 license.
- Confirm a license is available.
- Select Next.
Review and Create
- Review the configuration.
- Select Finish adding.
- Verify the account appears under Active users.
Step 2: Assign the Global Administrator Role Through PIM
Access the Microsoft Entra Admin Center
Open the Microsoft Entra Admin Center:
🔗 Microsoft Entra Admin Center
Open Privileged Identity Management
-
In the left navigation pane, select:
Identity Governance → Privileged Identity Management
-
Select:
Microsoft Entra roles.
Add a Global Administrator Assignment
- Select Roles.
- Search for Global Administrator.
- Open the role.
- Select Add assignments.
Select the User
- Select No member selected.
- Search for the newly created user.
- Select the account.
- Select Next.
Configure the Assignment
Under Assignment Type, select:
Eligible
Complete the Assignment
- Review the assignment settings.
- Select Assign.
- Confirm the assignment is successfully created.
The user should now appear under:
Global Administrator → Eligible assignments.
Comments
0 comments
Please sign in to leave a comment.