Share via

Assign global Administrator role

Mir Mustaq Hussain 0 Reputation points
2023-10-07T18:00:22.2566667+00:00

Hi Team,

I want to assign global administrator access to one of my users, but my current global administrator account is associated with "Microsoft Office 365," and I don't have access to Office 365. What can I do in this case? Please suggest a solution.

Microsoft Entra

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dillon Silzer 56,681 Reputation points
    2023-10-08T03:10:56.1966667+00:00

    Hi Mir,

    If you can login to https://admin.microsoft.com and you have Global Administrator role on your account, then you will be able to assign this to the user (use the search on the top > Choose the user > Assign roles).

    Assign admin roles in the Microsoft 365 admin center

    https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide

    If this is helpful please accept answer.

    1 person found this answer helpful.
  2. Sandeep G-MSFT 16,696 Reputation points Microsoft Employee
    2023-10-09T10:27:10.6233333+00:00

    @Mir Mustaq Hussain

    Thank you for posting this in Microsoft Q&A.

    As I understand you want to assign Global admin role to one of your users in Azure AD. But your current global admin account is associated with Office 365.

    Office 365 is just an application which is again part of Azure AD. This means even if you try to login to Office 365, the authentication for user happens in Azure AD itself.

    Office 365 is just an application with its own user admin portal. Whatever users and user roles you have in Azure AD, it would be same in office 365 as well.

    As per your question you have an account who has global admin in office 365. As per my explanation, you can login with same global admin credentials to Azure AD portal as well.

    If you are the only global admin on the account and are blocked entirely, you can reach out to the Azure Data Protection team to restore access. 866-807-5850

    Also, for the future, you can create an emergency access account (break glass) in Azure AD. This account will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason.

    https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access

    Some other support option include;

    AzureSupport

    https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

    azcommunity@microsoft.com

    or creating a ticket through a different account:  https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

    Let me know if you have any further questions.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.