Forum Discussion
Delegate access for Advanced Security Management
Hi
How do I give someone access to Advanced Security Management without giving them Office 365 global administrator ?
There is https://support.office.com/en-us/article/Get-started-with-Advanced-Security-Management-d9ee4d67-f2b3-42b4-9c9e-c4529904990aguide for ASM
It says: "You get started with Advanced Security Management by signing in to Office 365 as a Global Administrator or Security Administrator for Advanced Security Management, and turning on the feature... "
What is this role "Security Administrator for Advanced Security Management" and how can I add members to it ?
I cannot find any documentation that would describe it.
Searching google for "Security Administrator for Advanced Security Management" returns two results, both pointing to the getting started guide 
Security Admin is a MSOL (MS Online) role and you can manage it via the MS Online Powershell.
First dump the roles:
Get-MSOLRole
Next locate the ObjectID for the Security Administrator role and copy that.
Now run get-MSOLRoleMember to view who has this role
To add you run:
Set-MSOLRoleMember -ObjectID <value> -RoleMemberEmailAddress <value>
Hope this helps.
4 Replies
Security Admin is a MSOL (MS Online) role and you can manage it via the MS Online Powershell.
First dump the roles:
Get-MSOLRole
Next locate the ObjectID for the Security Administrator role and copy that.
Now run get-MSOLRoleMember to view who has this role
To add you run:
Set-MSOLRoleMember -ObjectID <value> -RoleMemberEmailAddress <value>
Hope this helps.
For those coming after, the actual syntax is:
Add-MSOLRoleMember -RoleObjectID <ObjectID> -RoleMemberEmailAddress <EmailAddress>
- Get your Admin to asign you compliance manager or security manager role. You will also need some exchange on line roles. Even if you do not use exchange online.
I think it's just another case of the documentation being well ahead of actual feature rollout.
