Delegate user photo upload permissions

supertech01 16 Reputation points
2022-05-17T14:50:09.417+00:00

We would like to delegate permission to our helpdesk admins so they can upload user profile photos to Office 365 on behalf of users.
We do not want to give our helpdesk full admin permissions to Office 365 we simply want them to upload user photos. What is the best way to do this?

Exchange | Exchange Server | Management
{count} votes

2 answers

Sort by: Most helpful
  1. Manu Philip 20,206 Reputation points MVP Volunteer Moderator
    2022-05-17T17:57:27.85+00:00

    your requirement can be achieved by creating special Management Role (RBAC) with only permission related to the photo update and assign that role to the required users or group. Following steps will help
    Create a new Management Role and set the required permissions to the role through PowerShell (Connect Exchange Online PowerShell using the authorized account - connect-exchangeonline
    After connecting the account, you can create the Management role by using the following command

    New-ManagementRole -Name "PictureUpload" -Description "Allows uploading user pictures" -Parent "User Options"  
    

    The new role should be fine tuned so that, the role allows only picture related permissions. This can be achieved by running the following command. The command basically removes all permissions except the picture update permissiond

    Get-ManagementRoleEntry "PictureUpload\*" | where {$_.Name -Notlike '*photo*'} | foreach {Remove-ManagementRoleEntry -Identity "$($_.id)\$($_.name)" -Confirm:$false}   
    

    Now, the new mnagement role is ready to be assigned to the required user or group. For this, connect the exchange online admin center and create a new role
    202932-image.png

    'Roles' section will have the new role created as below
    202894-image.png

    Select the required members and assign the required permission so that they will have the picture edit permissions in the organization

    ----------

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    2 people found this answer helpful.

  2. Shahad Fakhi 1 Reputation point
    2022-09-08T15:23:47.787+00:00

    Hello Philip Sir,

    After i run the above commands and i add the user to the role.

    Will I be able to change the picture from the admin center. How i must try to change the Profile picture after i implement the solution provided by you.

    Thank you!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.