Unlike nearly the whole of Azure for some inexplicable reason to just administrate Universal Printing the account must have a licence for UP. Please remove this requirement but by all means prevent the account from using the service normally - why is a licence needed?
We have a corporate policy that all Azure admin accounts are separate to any user account i.e. as Global Admin I have my day to day account and my separate Azure admin account for performing administration in Azure/M365. We do not allow these accounts to have any licences as they should not be used for any other purpose, not even an Exchange licence.
23 Comments
It's best practice for admins NOT to assign admin roles to their day-to-day (email, computer login, Teams etc) account, but to have a separate Admin Account. Your email/computer login/Teams account has no more permissions than a standard (non-IT) employee, and all admin roles are assigned to your admin account.
There has never been a cost penalty for following the best practice, because everything else in M365/Entra/Azure can be administered by an unlicensed account, and it's compliant as long as it's the same human who already has another licensed account.
Implementing Universal Print, we are finding that there is now a cost penalty for following best practice: the admin accounts have to be licensed, otherwise even with the Print Administrator role, they cannot administer Universal Print.
Very frustrating as it goes against the very principles that Microsoft espouses, in having unlicensed admin accounts for administration. It also prevents administration by partners using GDAP as they cannot be licensed.
Had to assign Printer Administrator role to my daily login which is not great. Please fix this.
Pretty floored by this one.
Wouldn't hold any hope of this joke of a requirement being fixed given it has been almost 5 years since this post and the status is still "Looking into it".
This is an absolute joke. By practicing good IT security, this system causes customers to wait up to 24 hours for each universal print issue. As assigning the license can take 24 hours to apply to the portal. Most of our customers have moved away from Universal Print due to these restrictions, but it still makes me cringe at how incompetent a system this is. And the excuse for nearly 5 years of this mess? "We are working on other features". I guess if it doesn't have a CoPilot logo slapped on it, it gets left to the wayside to rot and die.
Agreed. Several of our customers have either moved off Universal Print or rejected proposals to implement it because of these licensing issues and its inability to be managed by Partner administrators. We've moved on to other print management products
When will the requirement for a license be removed?
Also unable to manage printers through GDAP relationship because of this requirement
This is important, as requiring a license for administration results in less secure environments. If the license for use is required for administration, companies are then encouraged to give the administrator role to the regular use accounts of IT personnel in order to save costs. Giving administrator roles to regular use accounts, rather than administrator accounts, is well known to be a Bad Idea
Hi Jimmy_Wu. Per other comments, it's been over a year since the last update. Can you please advise if this is on the roadmap yet? Thanks.
This was requested in 2021, why is this still a thing and not yet implemented? This is of course a rhetorical question, just add me to the list.
