Either another Global Admin or a Privileged Authentication Admin can reset a Global Admin's password. A Global Admin may inadvertently lock their account and require a password reset.

We recommend you limit the number of Global Admins as much as possible. Global Admins have almost unlimited access to your organization's settings and most of its data. Security guidelines for assigning rolesīecause admins have access to sensitive data and files, we recommend that you follow these guidelines to keep your organization's data more secure. However, these roles are a subset of the roles available in the Azure AD portal and the Intune admin center.įor the full list of detailed Azure AD role descriptions you can manage in the Microsoft 365 admin center, check out Administrator role permissions in the Azure AD built-in roles topic.įor the full list of detailed Intune role descriptions you can manage in the Microsoft 365 admin center, check out Role-based access control (RBAC) with Microsoft Intune.įor more information on assigning roles in the Microsoft 365 admin center, see Assign admin roles. The Microsoft 365 admin center lets you manage Azure AD roles and Microsoft Intune roles. The user's details appear in the right dialog box.

Select the person who you want to make an admin.

In the left navigation pane, select Users > Active users.Select Admin to go to the Microsoft 365 admin center.If you see the Admin button, then you're an admin. While signed into Microsoft 365, select the app launcher.

Download microsoft admin