Which Entra Role is Required to Manage Users in Microsoft 365 Lighthouse?

Question

Hello all,

I read this article: https://learn.microsoft.com/en-us/microsoft-365/lighthouse/m365-lighthouse-overview-of-permissions?view=o365-worldwide

It states that I need an Entra Role to manage (search, view, etc.) users in Lighthouse. However, I can't figure out which Entra Role is it? It should be assigned to my user on my company's tenant (managing tenant, not customer) right? Because now, when I navigate to Lighthouse > Tenants > [Customer Tenant], under Total Enabled Users, it says "Unable to load"

Answer 1

Hi Gas-Andrew Chedid

To effectively manage users in Microsoft 365 Lighthouse, you need to verify that you have the appropriate Microsoft Entra role assigned in the partner tenant, where you are managing the customers' environments. The role must have the necessary permissions to perform tasks such as creating and managing service requests, as well as user management activities like adding users or resetting passwords.

Specifically, you will need an Entra role with the permission:

https://learn.microsoft.com/en-us/microsoft-365/lighthouse/m365-lighthouse-overview-of-permissions?view=o365-worldwide#lighthouse-rbac-roles-and-capabilities
microsoft.office365.supportTickets/allEntities/allTasks to create and manage service requests. Additionally, for user management tasks, such as adding users or resetting passwords, you may need roles that provide broader administrative capabilities.

It’s important to remember that the Entra role must be assigned to your user in the managing tenant, not in the customer tenant. This will ensure you have the right permissions to manage users and perform other administrative tasks.
https://learn.microsoft.com/en-us/microsoft-365/lighthouse/m365-lighthouse-manage-lighthouse-rbac-permissions?view=o365-worldwide

let us know if any help, we will always help as you needed.!

---

If the answer is helpful, please and "Upvote it".