Permissions to reset MFA on a user account

Question

Hi there

I was wondering if anyone can help me figure out the permissions needed to access and reset a users MFA details in Azure/ Entra? I can only see that a Global Administrator has access to do this at the moment, but I can't give this level of access to all members of my IT Support Team. Attached is the a screenshot of what I mean.

Found an article that suggested either Conditional Access Administrator and Security Administrator would allow this, but it didn't though when I asked a colleague to test.

If someone can help and advise, then that would be great.

Many thanks

Nick

Answer 1

Hi@Nick Inglis

Thank you for posting this in Microsoft Q&A.

I understand you want to know about Permissions to reset MFA on a user account.

Apart from the Global administrator, the Privileged Authentication Administrator role have access to perform the reset MFA on all users account and Authentication Administrator role have access to perform the reset MFA on some user's account.

For your reference: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#privileged-authentication-administrator

Hope this helps. Do let us know if you any further queries.

Thanks,
Navya.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.