Grant rights to perform Microsoft 365 management tasks

Using Adaxes, you can delegate Microsoft 365 management tasks to users. For example, you can allow users to activate and deactivate accounts in Microsoft 365, assign and revoke Microsoft 365 licenses, etc. The rights to perform Microsoft 365 management tasks, like any other rights in Adaxes, are granted with the help of security roles.

By default, some built-in security roles contain the Write All Properties and Full Control permissions that grant the right to perform all Microsoft 365 management tasks.

In this tutorial, you will learn how to add permissions to perform various Microsoft 365 tasks to an existing security role.

Permissions granted by security roles are effective only within Adaxes.

  1. Launch Adaxes Administration console.

     How { #collapse1}
    • On the computer where Adaxes Administration console is installed, open Windows Start menu.

    • Click Adaxes Administration Console.

  2. Expand Adaxes service \ Configuration \ Security Roles and select the security role you want to modify.

  3. In the Permissions section on the right, click Add.

  4. In the list of object types on the left, select User.

  5. In the right part of the dialog, select the permissions you want to delegate:

    • To delegate full control over Microsoft 365 accounts, select the Write Microsoft 365 Properties permission in the Allow column.

    • To allow users to perform specific operations only, you need to grant them the permission to modify the corresponding Microsoft 365 property. The following table contains Microsoft 365 operations and corresponding permissions:

      Operation Permission
      Activate account, set location Write 'Microsoft 365 Location' property
      Assign/revoke licenses Write 'Microsoft 365 Licenses' property
      Allow/block access to Microsoft 365 Write 'Microsoft 365 Sign-In Blocked' property

      In the Property-specific permissions section:

      • Type Microsoft 365 in the filter edit box to filter out permissions unrelated to Microsoft 365.

      • Select the desired permission in the Allow column. For example, to delegate the right to assign and revoke Microsoft 365 licenses, select the Write Microsoft 365 Licenses permission.

    • Click OK.

  6. Click Save changes.

See also