Membership of TenantAdmins group

Question

Membership of TenantAdmins group

Anonymous

I am going through alert policies, which are mostly set to alert TenantAdmins (I'm assuming by default). I am trying to find who is a member of that group and how to add/remove any other users, but having no luck. Can someone point me at where that group is managed?

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

0 additional answers

Answer 1

Dear Mike Howard1,

Good day! Thank you for posting to Microsoft Community. We are happy to help you!

In each Office 365 Tenant there´s also a hidden security group named “TenantAdmins_[someID]”. This group is also not visible in the Office 365 portal, but in the Exchange portal. All global administrators are members in there automatically – and you can´t add members to that group manually.

If you want to know the accounts of all users in your tenant, please use the account of a global administrator to run PowerShell. To display the full list of user accounts, run this command:

Get-AzureADUser

You should get information similar to this:

ObjectId                             DisplayName                                           UserPrincipalName
--------                             -----------                                           -----------------
032fc1fc-b5a2-46f1-8635-3d7dcb52c48d Adele Vance                                           AdeleV@litwareinc.OnMicr...
bd1e6af1-41e7-4f77-a2ac-5b209950135c Global Administrator                                  admin@litwareinc.onmicro...
ec37a4d6-232e-4eb7-82a5-1613490642a5 Alex Wilber                                           AlexW@litwareinc.OnMicro...
be4bdddd-c790-424c-9f96-a0cf609b7815 Allan Deyoung                                         AllanD@litwareinc.OnMicr...
598ab87b-76f0-4bf9-9538-bd46b10f4438 Christie Cline                                        ******@litwareinc.OnM...
40722671-e520-4a5f-97d4-0bc9e9b2dc0f Debra Berger                                          DebraB@litwareinc.OnMicr...

View a specific account

To display a specific user account, run the following command. Fill in the sign-in account name of the user account, which is also known as the user principal name (UPN). Remove the "<" and ">" characters.

Get-AzureADUser -ObjectID <sign-in name of the user account>

Here's an example:

Get-AzureADUser -ObjectID ******@litwareinc.onmicosoft.com

At the same time, for your other question, please kindly refer to: Remove users, groups, or devices from an administrative unit and Assign admin roles in the Microsoft 365 admin center

If my understanding is wrong or you still haven't solved the problem, please provide me with more details so that I can do more research.

Thanks in advance for your understanding! Your patience and cooperation will be highly appreciated. Hope you all the best!

Sincerely,

Kerry Chen | Microsoft Community Moderator

Share via

Membership of TenantAdmins group

0 additional answers