Forum Discussion
Solved
Administrative roles and groups
Are there certain administrator roles in Azure AD or Office 365 that have to be assigned to an individual as opposed to a security group? I've found we can add a security group as a member to a role...
This script by Paul is a good starting point: https://practical365.com/security/reporting-office-365-admin-role-group-members/
I need an automated way to review who has elevated access in O365. We have on-prem security groups that are tied into a review process, but it makes it difficult when we can't use groups for some O365 roles. We don't have E5. Any suggestions to do this?
You can easily report on admin role membership via PowerShell. Or you can use Azure AD Privileged Identity Management.
Is there one script though to export a list of all admin roles and memberships?
This script by Paul is a good starting point: https://practical365.com/security/reporting-office-365-admin-role-group-members/