Azure Role needed to manage Target domains in External Collaboration Settings

Komoroske, Gina 371

Hi - We are trying to limit the number of global admins, and in our workflow, we have a team that manages the target domains seen in Azure Active Directory User Settings, External collaboration settings. We removed that team from the global admin role, but can't seem to find the role they need to have in order to add and remove target domains here. Any help is appreciated!

1 answer

Marilee Turscak-MSFT 36,411 Reputation points Microsoft Employee

2020-10-14T21:53:07.19+00:00

To configure external collaboration settings, the user needs to be a tenant admin.
Please sign in to rate this answer.
Komoroske, Gina 371 Reputation points

2020-10-14T22:19:27.807+00:00

Hi,
I don't see the role called "tenant admin" . . . can you provide the Azure role to grant?

Marilee Turscak-MSFT 36,411 Reputation points Microsoft Employee

2020-10-19T22:57:39.513+00:00

It's just a global admin for the tenant.

Loster, Jason 1 Reputation point

2021-12-03T16:08:00.463+00:00

hi, did you end up giving the group global admins again or did you find a workaround. i am facing same issue here

Komoroske, Gina 371 Reputation points

2022-02-04T17:16:03.437+00:00

Hi LosterJason-9098, unfortunately every time that group needs a new domain added they have to ask a global admin to do it. To me this is ridiculous that the security for this isn't separated out yet, and Microsoft wants us to have no more than 3 global admins. For large corporations, this is very small-minded.
Sign in to comment

Share via

Azure Role needed to manage Target domains in External Collaboration Settings

1 answer