Activating MFA for a User: Which built-in Role is required?

Question

Hey Guys

We are currently using Privileged Identity Management and I wanted to check, which Built-In role allows you to toggle Multi-Factor Authentication per User to "enabled" and "disabled". This article here says that a global admin is required: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates

Is that really the case? Then can you elaborate what the "Security" and "Authentication"-Administrators are for?

Thank you for your Help.

Kind regards,

Gabe

Answer 1

Hi,

I think it provides a baseline to use GA account but as per this directive you can use Security Administrator and Authentication Administrator role to setup the MFA.

delegate-by-task

Hope this helps.
JS

==
Please Accept the answer if the information helped you. This will help us and others in the community as well.