What O365 roles can run PowerShell scripts?

Question

I see the documentation, "To use SharePoint Online PowerShell commands, you must be a SharePoint Online global administrator."

Does this imply that a person who needs to run powershell scripts for SPO have both the Global Admin and SharePoint Admin roles? Or is the SharePoint Admin role sufficient to be able to run SPO Powershell commands?

brent ellis · Answer

You can even do it at just the Site Collection Admin level if need be (for a particular site collection).

Global Admin is only needed for a few things, if you start crossing into OneDrive scripting, or things that require you to touch the -admin site collection for example.

jcgonzalezmartin · Answer

IMHO, it should be enough if you are a SharePoint Admin

davidpetree1 · Answer

Im guessing you need to be either a Global Admin or User Management Admin&nbsp;You need the same role as you would need to do it in the portal.&nbsp;https://support.office.com/en-us/article/Assign-or-remove-licenses-for-Office-365-for-business-997596b5-4173-4627-b915-36abac6786dc

jcgonzalezmartin · Answer

All, just the results of my tests:(1) To use PowerShell at the SPO Tenant Level you need to be a Global Admin or a SPO Admin. This allows you to work with SharePoint Online Management Shell(2) To use PowerShell at the Site Collection Level it's enough to be a site collection Admin as stated by Brent...but you have to run your PowerShell code using ISE or Visual Studio and you have to work with Client Side Object Model

brent ellis · Answer

Global Admin will also give "Global Admin" rights in Azure subscription that contains AAD.&nbsp;You could hypothetically give the user "co-administrator" rights to the Azure Subscription that contains your AAD, and NOT give them Global Admin rights. &nbsp;I believe these rights are limited to inside the Azure Portal, and don't go out into the various O365 Services, like "Global Admin" does.

Forum Discussion

What O365 roles can run PowerShell scripts?

7 Replies

Resources