Error when assigning Roles

Question

I'm working on deploying DirSync in our AD environment. I've setup a user in the 365 cloud (ssoadmin), but get an error every time I attempt to change their role from user. Regardless whether I attempt to use the Global admin, or a custom admin setup, I receive "An Error Has Occurred" I get no other details, and this happens across browsers.

So far:

• DirSync was installed, but not configured on the AD machine yet (pending admin user on cloud)
• Active Directory Sync is Active.
• The ssoadmin account was specifically created for this purpose.
• There are no other admin accounts that will be cloud-only.
• I've tried with multiple email accounts (even ones that don't exist) with no change
• This was previously synchronized with another AD domain that has been depreciated.
• All remaining accounts are active, with no known errors.

We really need some better error reporting. 

But I really need to get this functioning first.

Answer 1

Have you tried doing it via PowerShell? You can get the roles via Get-MsolRole, and assign a role to the user via:

Add-MsolRoleMember -RoleObjectId 62e90394-69f5-4237-9190-012177145e10 -RoleMemberEmailAddress *** Email address is removed for privacy ***

You can also try it by using the ObjectId instead of email:

Add-MsolRoleMember -RoleObjectId 62e90394-69f5-4237-9190-012177145e10 -RoleMemberObjectId blablabla

Answer 2

Hi Sean,

Does it work via PowerShell?

Thanks,

Eric Yang

Answer 3

Vasil,

I have not yet attempted the powershell method. I'll give this a try later today and post the results.

Answer 4


eric,

i've tried the steps you outlined with multiple users using both methods. the results are the same. the screenhot is attached.

Answer 5

hi sean,

i’d like to confirm how you changed the admin role for the user. there are two places we can make this change, have you tried both?

first method:

1. go to office 365 admin center > users > active users.

2. select one user and then click edit user roles on the right.

second method:

1. go to office 365 admin center> users > active users.

2. select one user and then click edit on the right.

3. click roles.

 

if you still can’t assign the admin role, could you provide the following information:

1. could you try creating a new user in office 365 and test if you can assign admin roles to this new user?

2. could you provide a screenshot of the error message for our reference?

to upload screenshots, you can click use rich formatting at the bottom and then click the icon of insert media.

 

thanks,

eric yang