Forum Discussion
Johol62
Jul 05, 2023Copper Contributor
Azure roles for Group administration
I can't add members and owners to existing Azure groups, Add owner/members is greyed out. I have the "Group Administrator" and "User Administrator" roles assigned. There are no problems with groups...
eliekarkafy
Jul 05, 2023MVP
what is your current permission in Azure AD ? are you a global admin ?
Johol62
Jul 05, 2023Copper Contributor
I have a bounce of permission but not the global administrator.
Guess that the "Group Administrator" should be sufficient.
It's the cloud security groups I can't add members/owners to.
Works fine for our global admins, but that's what we would expect 😉
Guess that the "Group Administrator" should be sufficient.
It's the cloud security groups I can't add members/owners to.
Works fine for our global admins, but that's what we would expect 😉
- LeonPavesicJul 05, 2023Silver Contributor
Hi Johol62,
you need to have a "Group Owner" (least privilege) and additional "User Administrator" role to be able to manage group membership.Least privileged roles by task - Microsoft Entra | Microsoft Learn
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
Kindest regards
Leon Pavesic- Johol62Jul 05, 2023Copper Contributor
LeonPavesic So if there is no group owner in the first place, who do I assign one?
One of my collegues which is not Global admin, he can do it right now, so now we are going through all the roles he has to figure out whats makes the difference for him.
- eliekarkafyJul 05, 2023MVP
- Johol62Jul 05, 2023Copper ContributorIt's both groups with and without a owner, except for where I'm specific added as a group owner.
- eliekarkafyJul 05, 2023MVPdid you try to manage those group from the O365 admin portal and not from Azure AD ?