Forum Discussion
Azure roles for Group administration
what is your current permission in Azure AD ? are you a global admin ?
- Johol62Jul 05, 2023Copper ContributorI have a bounce of permission but not the global administrator.
Guess that the "Group Administrator" should be sufficient.
It's the cloud security groups I can't add members/owners to.
Works fine for our global admins, but that's what we would expect 😉- eliekarkafyJul 05, 2023MVP
- Johol62Jul 05, 2023Copper ContributorIt's both groups with and without a owner, except for where I'm specific added as a group owner.
- LeonPavesicJul 05, 2023Silver Contributor
Hi Johol62,
you need to have a "Group Owner" (least privilege) and additional "User Administrator" role to be able to manage group membership.Least privileged roles by task - Microsoft Entra | Microsoft Learn
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
Kindest regards
Leon Pavesic- Johol62Jul 05, 2023Copper Contributor
LeonPavesic So if there is no group owner in the first place, who do I assign one?
One of my collegues which is not Global admin, he can do it right now, so now we are going through all the roles he has to figure out whats makes the difference for him.