Feedback by UserVoice

How can we improve the tenant admin features O365?

← Office 365 Admin

Delegate permissions for managing MFA

To be able to delegate the permission of administering user account MFA setting like enable/disabled forcing reset of MFA code etc.

Currently the Global Admin permission is needed. It would be able very useful to delegate this to a service desk function without having to provide full admin access to the tenant.

4,195 votes
Vote
Sign in
(thinking…)
Sign in with: Facebook Google
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Jacob McGuire shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

180 comments

Sign in
(thinking…)
Sign in with: Facebook Google
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Stewart commented  ·   ·  Flag as inappropriate

    This is a critical security feature for our customers and the inability for our engineers to manage the requests is incredibly inhibiting.

  • Joe Yang commented  ·   ·  Flag as inappropriate

    Please let user with role of helpdesk administrator be able to manage MFA. Microsoft can set it up that any MFA change by helpdesk administrator will trigger an email to be sent to global administrator for review. GA can't handle all requests accross the world for multiple country wide corperations.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Please let user with role of helpdesk administrator be able to manage MFA. Microsoft can set it up that any MFA change by helpdesk administrator will trigger an email to be sent to global administrator for review.

  • BrianB commented  ·   ·  Flag as inappropriate

    Last update "In the Plans" was over a year ago?

    MFA is essential & having it only via Global Admin is not acceptable.

  • anónimo commented  ·   ·  Flag as inappropriate

    We have 5,000+ users using the 365. We need this rights delegable to MFA authenticator.

  • Joey Dagami commented  ·   ·  Flag as inappropriate

    Please let user with role of helpdesk administrator be able to manage MFA. Microsoft can set it up that any mfa change by helpdesk administrator will trigger an email to be sent to global administrator for review.

  • Mark Hall commented  ·   ·  Flag as inappropriate

    We would like to kindly ask to have this feature implemented by Microsoft on Microsoft Azure AD, as this would surely help us during our day-to-day work and in turn, allow us to provide a much more efficient and valuable Service to the End-User.

  • Anonymous commented  ·   ·  Flag as inappropriate

    We have a userbase of 2K users and delegated access is extremely important to us, as Service Desk cannot be granted Admin access.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Any update on this request yet? Really need to give HD access to MultiFactor without giving Global Admin Rights.

  • Kazim commented  ·   ·  Flag as inappropriate

    Hi
    Its been 3 years now for this request , Hope it will be implemented soon, ( My suggestion is to change the sentence at least on info of Authentication Admin so that the global admins can get a clear picture regarding this whenever they assign a role to someone )

  • Mina Gerguis commented  ·   ·  Flag as inappropriate

    It had been on for over 3 years since requested, and nearly a year in plans, hopefully this will be done soon, as MFA is essential & having it only via Global Admin is not acceptable.

  • Anonymous commented  ·   ·  Flag as inappropriate

    This really does need resolving please - Global Admin just isn’t appropriate for day to day admin tasks. Thanks

← Previous 1 3 4 5 … 8 9

Office 365 Admin

Categories

Feedback and Knowledge Base

(thinking…)

Related Sites