Forum Discussion
Administrative roles and groups
This script by Paul is a good starting point: https://practical365.com/security/reporting-office-365-admin-role-group-members/
That's specific to the application. None of the Office 365 roles support group assignment. Some of the workload-specific roles do however (intune as you pointed out, Exchange, etc), as do some of the Azure AD roles. As a general rule of thumb, assume they don't support group assignments...
I need an automated way to review who has elevated access in O365. We have on-prem security groups that are tied into a review process, but it makes it difficult when we can't use groups for some O365 roles. We don't have E5. Any suggestions to do this?
You can easily report on admin role membership via PowerShell. Or you can use Azure AD Privileged Identity Management.
Is there one script though to export a list of all admin roles and memberships?
This script by Paul is a good starting point: https://practical365.com/security/reporting-office-365-admin-role-group-members/