Admin permission for MFA

lalajee 1,811

Hi, What group user needs to be in, to Access Azure MFA configuration

I need to give a it admin full rights to setup and configure MFA

https://portal.azure.com/#blade/Microsoft_AAD_IAM/MultifactorAuthenticationMenuBlade/GettingStarted

What group user need to be added in.

Tebogo Leshotho 0 Reputation points

2023-06-30T13:32:25.73+00:00

Name: Authentication Administrator

Description: Users with this role can set or reset any authentication method (including passwords) for non-administrators and some roles. Authentication Administrators can require users who are non-administrators or assigned to some roles to re-register against existing non-password credentials (for example, multifactor authentication or FIDO), and can also revoke remember multifactor authentication on the device, which prompts for MFA on the next sign-in.

Accepted answer

AmanpreetSingh-MSFT 56,311 Reputation points

2020-06-25T17:12:10.833+00:00

Hi @lalajee

If you want to configure MFA for non-admin users only use Authentication Administrator role and if you want to configure MFA for all users including admin users, use Privileged Authentication Administrator role. You can read more information about these roles in the document shared by michev.

Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.
Please sign in to rate this answer.

3 people found this answer helpful.
Ranjith KR 11 Reputation points

2023-01-06T11:51:31.143+00:00

MFA not working with Privilaged authentication administrator and Authentication administrator also. It only works with Global administrator.
Sign in to comment

2 additional answers

Ranjith KR 11 Reputation points

2023-01-06T11:57:22.73+00:00

MFA works with Authentication Policy administrator role.
Please sign in to rate this answer.

2 people found this answer helpful.
Tebogo Leshotho 0 Reputation points

2023-06-30T13:26:39.9333333+00:00

You need to use the below

Name: Authentication Administrator

Description: Users with this role can set or reset any authentication method (including passwords) for non-administrators and some roles. Authentication Administrators can require users who are non-administrators or assigned to some roles to re-register against existing non-password credentials (for example, multifactor authentication or FIDO), and can also revoke remember multifactor authentication on the device, which prompts for MFA on the next sign-in.
Sign in to comment
Vasil Michev 95,666 Reputation points MVP

2020-06-25T16:47:22.64+00:00

Use this article whenever you have questions about which admin role you should use: https://learn.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment