Office 365 portal

Office 365 portal. About admin roles in the Microsoft 365 admin center

You can read about these categories and guidance for management of them at	License admins also can: - Reprocess license assignments for group-based licensing - Assign product licenses to groups for group-based licensing Office Apps admin Assign the Office Apps admin role to users who need to do the following: - Use the Office cloud policy service to create and manage cloud-based policies for Office - Create and manage service requests - Manage the What's New content that users see in their Office apps - Monitor service health Password admin Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators
The global reader admin can't edit any settings	Global reader Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view

You can read about these categories and guidance for management of them at

License admins also can: - Reprocess license assignments for group-based licensing - Assign product licenses to groups for group-based licensing Office Apps admin Assign the Office Apps admin role to users who need to do the following: - Use the Office cloud policy service to create and manage cloud-based policies for Office - Create and manage service requests - Manage the What's New content that users see in their Office apps - Monitor service health Password admin Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators

The global reader admin can't edit any settings

Global reader Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view

This process is initiated by an authorized partner.

Microsoft 365 и приложения Office: Billing admin Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health
Office 365 URLs and IP address ranges: However, these roles are a subset of the roles available in the Azure AD portal and the Intune admin center
About admin roles in the Microsoft 365 admin center: Exchange Online ID Category ER Addresses Ports 1 Optimize Required Yes outlook

By default, we first show roles that most organizations use
Only global admins can: - Reset passwords for all users - Add and manage domains Note: The person who signed up for Microsoft online services automatically becomes a Global admin	Security guidelines for assigning roles Because admins have access to sensitive data and files, we recommend that you follow these guidelines to keep your organization's data more secure

By default, we first show roles that most organizations use

Only global admins can: - Reset passwords for all users - Add and manage domains Note: The person who signed up for Microsoft online services automatically becomes a Global admin

Security guidelines for assigning roles Because admins have access to sensitive data and files, we recommend that you follow these guidelines to keep your organization's data more secure

Endpoints data is updated as needed at the beginning of each month with new IP Addresses and URLs published 30 days in advance of being active.

Microsoft 365 и приложения Office: The endpoints are grouped into four service areas
Microsoft 365 и приложения Office: Admin role Who should be assigned this role? Require multi-factor authentication for admins It's actually a good idea to require MFA for all of your users, but admins should definitely be required to use MFA to sign in
Microsoft 365 и приложения Office: The BGP community that includes the route prefixes shown aligns with the service area listed

Check out Administrator role permissions in Azure Active Directory	The Microsoft 365 admin center lets you manage Azure AD roles and Microsoft Intune roles
This will help keep your data secure	It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections

Check out Administrator role permissions in Azure Active Directory

The Microsoft 365 admin center lets you manage Azure AD roles and Microsoft Intune roles

This will help keep your data secure

It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections

The partner sends you an email to ask you if you want to give them permission to act as a delegated admin.

Microsoft 365 и приложения Office: Select the Permissions tab to view the detailed list of what admins assigned that role have permissions to do
About admin roles in the Microsoft 365 admin center: Related content article article article article
Office 365 URLs and IP address ranges: Endpoint data below lists requirements for connectivity from a user's machine to Office 365