Home

O365 Roles

%3CLINGO-SUB%20id%3D%22lingo-sub-202369%22%20slang%3D%22en-US%22%3EO365%20Roles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-202369%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHow%20can%20I%20block%20the%20Security%20and%20Compliance%20section%20of%20O365%20for%20certain%20global%20admins%20or%20how%20can%20I%20alter%20their%20permissions%20to%20still%20give%20them%20access%20to%20o365%20Except%20the%20Security%20and%20Complaince.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20need%20to%20block%20the%20helpdesk%20from%20this%20section%20due%20to%20the%20nature%20of%20some%20of%20the%20searches%20i%20do.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20still%20need%20to%20them%20to%20be%20able%20to%20assign%20LIC%20to%20new%20user%20accounts%2C%20make%20mailbox%20changes%20like%20retention%20policy%2C%20making%20a%20user%20mailbox%20a%20shared%20mailbox%2C%20create%20resource%20mailboxes%20etc.%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-202369%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-204771%22%20slang%3D%22en-US%22%3ERe%3A%20O365%20Roles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-204771%22%20slang%3D%22en-US%22%3E%3CP%3EAwesome%20I%20will%20look%20this%20over.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-203073%22%20slang%3D%22en-US%22%3ERe%3A%20O365%20Roles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-203073%22%20slang%3D%22en-US%22%3E%3CP%3EGlobal%20Admins%20in%20Office%20365%20by%20nature%20have%20access%20to%26nbsp%3B%3CSTRONG%3Eall%3C%2FSTRONG%3E%20administrative%20capabilities%20within%20the%20tenant%20-%20there%20is%20no%20way%20to%20limit%20this.%3C%2FP%3E%3CP%3EInstead%2C%20I%20would%20look%20at%20giving%20your%20helpdesk%20resources%20a%20mix%20of%20other%20admin%20roles%20to%20achieve%20what%20they%20need.%20Here's%20a%20good%20breakdown%20of%20those%20roles%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FAbout-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FAbout-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d%3C%2FA%3E%3C%2FP%3E%3CP%3EThis%20will%20also%20help%20you%20comply%20with%20Microsoft's%20recommendation%20to%20limit%20the%20amount%20of%20Global%20Admins%20in%20your%20tenant%20(and%20improve%20your%20Office%20365%20Secure%20Score!).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-202533%22%20slang%3D%22en-US%22%3ERe%3A%20O365%20Roles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-202533%22%20slang%3D%22en-US%22%3EHave%20you%20reviewed%20different%20roles%20you%20can%20configure%20at%20the%20Compliance%20%26amp%3B%20Security%20Center%3F%3C%2FLINGO-BODY%3E
Frequent Contributor

How can I block the Security and Compliance section of O365 for certain global admins or how can I alter their permissions to still give them access to o365 Except the Security and Complaince.

 

I need to block the helpdesk from this section due to the nature of some of the searches i do.

 

I still need to them to be able to assign LIC to new user accounts, make mailbox changes like retention policy, making a user mailbox a shared mailbox, create resource mailboxes etc.  

3 Replies
Highlighted
Have you reviewed different roles you can configure at the Compliance & Security Center?

Global Admins in Office 365 by nature have access to all administrative capabilities within the tenant - there is no way to limit this.

Instead, I would look at giving your helpdesk resources a mix of other admin roles to achieve what they need. Here's a good breakdown of those roles: https://support.office.com/en-us/article/About-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b...

This will also help you comply with Microsoft's recommendation to limit the amount of Global Admins in your tenant (and improve your Office 365 Secure Score!).

Awesome I will look this over.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies