This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 81%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I have an Azure Active Directory B2C instance and need to grant permissions to another person to admin this instance (create new app registrations, etc.). First, I must create the user to whom I'll grant the permission. I'm presented with these choices:
Which one should I choose?
When answering, keep in mind that this is in the B2C's directory. Let me know if I should switch to the Default Directory before performing the add user action.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 32%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJR%3C/text%3E%3C/svg%3E)
Thanks Adrian. I would recommend to follow this document to create a new user. (https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory).
Adding new user with B2C tenants is recommended to have either invite users and signup user with domain associated with B2C tenants to operate on.
Hi @Adrian , have you seen this update? Do you have any follow-up questions?
@James Hamil Yes, I have follow-up questions on your answer. This answer was valuable insofar as leading me to this relevant doc.
Hi @Adrian , you can either create a user or B2C user, and then make them a global administrator. Please let me know if you need any help doing this.
Best,
James
Thanks @James Hamil !
That's interesting that a B2C user would be okay, too. I read elsewhere that a B2C user is a special kind of AD user that's not intended to manage tenant resources and so not an option. Was that an incorrect assessment?
As for the option to create a standard AD user in the B2C tenant's directory, it feels counterintuitive so please confirm that, when you say it's an option, you understand I'm in the B2C tenant's directory (not Default Directory).
Perhaps it doesn't matter but want to double-check... In the B2C tenant directory, should I click the New user button under Azure AD B2C or the one under Azure Active Directory? That is (see following screenshots),
versus
Hi @James Hamil , could you please follow up with an answer to my previous comment? Thanks.
Hi @Adrian for this I would follow the document that Jitendra posted, so option 2 where you add a new user under your company's name. Creating a standard AD user should be no issue. This thread details some of the questions you may have about the differences of AD and B2C. Please let me know if I can help further!
Best,
James