Forum Discussion
O365 Password Admin
Hi
As a small multi school Support Dept we are inundated with requests for password resets on accounts for email.
We have over 15 domains centrally managed and would like to set one user from each school to be able to manage there own password resets for that domain only.
currently the user has access to reset passwords for all users across the 15 schools but we would like to isolate this to the school they are based.
Is this possible at all?
Thanks
Andy
3 Replies
With the Password Administrator role, there is no ability to limit it to specific domains, it has power over the entire tenant.
Your best approach is to use the Self Service Password Reset functionality. However this does require Azure AD Premium P1, see https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-getting-started
There are third party products that can offer "custom" admin portals, scoping permissions to particular group of users, or domian. Though not sure how relevant they will be in an EDU setting :)
What restricts you from using the https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-overview?. It's better to fix the root of the problem.
