Forum Discussion

SpacerRyan's avatar
SpacerRyan
Copper Contributor
Jan 23, 2024
Solved

Admin roles for external collaboration settings not working

We are attempting to grant access to the external collaboration settings in Entra to facilitate adding and removing domains. We've gone over all the documentation and tried every single role that supposedly grants this access, but none of them work. Those underlined below have some sort of domain changing access according to Microsoft's documentation.

 

 

Even with all these roles, the screen remains completely grayed out.

 

 

Even on the Entra side of things, we can see all the respective roles assigned to the user, but it still doesn't work. Are we missing something here? Maybe some sort of dependency role for these other ones to work?

2 Replies

    • SpacerRyan's avatar
      SpacerRyan
      Copper Contributor

      VasilMichev 

       

      Thank you, Vasil. We were going based off documentation like this - https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure#configure-settings-in-the-portal, which states to "Sign in to the Microsoft Entra admin center as at least a External Identity Provider administrator." Then there is also this giant list of the https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference that lays out what each role can accomplish. I didn't see anywhere that states it requires Global Administrator, but apparently you do.

       

      I really appreciate you discovering this, as I had a feeling it was going to be something like this. Thank you again!

Resources