Create a Custom Role in Azure for enable this function (block Sign-in) not yet available?

Hector Orozco 1

The option to create a Custom Role just to enable this function (block Sign-in) not yet available?

Hector Orozco 1 Reputation point

2022-02-01T22:33:32.797+00:00

@Marilee Turscak-MSFT The option to create a Custom Role just to enable this function (block Sign-in) not yet available?. Need assign only this permissions for my HelpDesk (Block Sign-in) for Shared Mailbox.
Hector Orozco 1 Reputation point

2022-02-01T22:39:24.357+00:00

My questions is associated with this answer last year (with Azure AD role permission to block users? - need this to be granular) @Marilee Turscak-MSFT

Thanks

Hector Orozco

1 answer

Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee

2022-02-01T23:43:23.17+00:00

Hi @Hector Orozco ,

I understand that you are looking for the ability to create a custom role that solely blocks sign-in.

The last update I received is that they are actively working on this feature, but they do not have an ETA yet. The User Administrator role is currently the least privileged role that can perform these actions.

I have reached out to the product team to ask for an update and will post back if they have new information. You can check the release page for updates as well: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/whats-new

If you leave a feature request in the newly revised Ideas forum, I will gladly help bubble this up. https://feedback.azure.com/

Thanks,

Marilee
Please sign in to rate this answer.
Hector Orozco 1 Reputation point

2022-02-01T23:48:38.607+00:00

Thanks Marilee, that's indeed what I'm looking to do (create custom role for only blocks sign-in in Shared Mailbox), I appreciate your answer and official update of Product Team.

Best Regards.

Hector!.

Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee

2022-02-02T00:56:09.513+00:00

Thanks Hector! I just added a private comment with an update. Feel free to reach out to me at the email listed.

HOA-IDB T-IADB 1 Reputation point

2022-09-21T19:58:33.263+00:00

Hi Marilee, please any changes/update with this functionality?. We still have this need and we are looking for a way to not have to assign the User Administrator role because it adds other permissions.

Thanks.

Hector E. Orozco

Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee

2022-09-22T00:29:09.293+00:00

Just in case you have trouble viewing it, I wanted to let you know that I sent you a private comment related to this topic today. I sent one before when you initially asked this question too so I wasn't sure if you were able to see it.
Sign in to comment