More information at “ About Office 365 admin roles.” Compliance Administrator:Users with this role have management permissions within in the Office 365 Security & Compliance Center and Exchange Admin Center.Billing Administrator: Makes purchases, manages subscriptions, manages support tickets, and monitors service health.Perform billing and purchasing operations for Office productsĮnable or disable multi-factor authenticationĬannot delete a global administrator or create other administratorsīelow is an extract of the types of administrator roles as well as a quick description on each one: Here is more information on what this User Administrator can and can’t do: Can doĬreate, edit, and delete users and groups Select Limited administrator option from the Directory Role blade.Select Directory role option from the user blade.Select the user from your Azure AD / All users blade.For example, this role does not allow deleting a global administrator, and while it does allow changing passwords for non-admins, it does not allow changing passwords for global administrators or other privileged administrators. Additionally, this role includes the ability to manage support tickets and monitors service health. User Account Administrator: Users with this role can create and manage all aspects of users and groups. The administrator role I gave the user was: Using Azure Active Directory (Azure AD), I was able to designate this user as an administrator of a specific role to serve these specific requirements. Remove an Azure AD user to an Azure AD group.Add an Azure AD user to an Azure AD group.I recently had the requirement to grant a user in my organization to be able to do the following:

Password reset office 365 guest user