Is there any way to unblock MFA in azure without having GA rights (maybe other rights have permissions)

Question

Is there any way to unblock MFA in azure without having GA rights (maybe other rights have permissions). I don't want to give GA access to team but they should have the ability to unblock MFA.

Answer 1

You can use the Authentication Administrator/Privileged Authentication Administrator roles. For detailed list of the minimum role required for specific tasks, refer to https://learn.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task

Answer 2

Hello @Aditya There are a few ways as said above and you can also use these ways :

1. Use a delegated administrator account: If your Azure AD environment is configured to allow delegated administration, you may be able to use a delegated administrator account to unblock MFA for a user. Delegated administrators have limited administrative privileges and can perform certain administrative tasks, such as resetting passwords and managing MFA settings, for specific users or groups of users.
2. Use an Azure AD role-based access control (RBAC) role: If your Azure AD environment is configured to use RBAC, you may be able to assign an RBAC role to your account that includes the necessary permissions to manage MFA settings for users. For example, the "Authentication Administrator" role allows the user to manage authentication methods, including MFA, for all users in the organization. In case this helped you kindy mark the answer as Accepted! BR