Home

Permission clarification for O365 Group expiration policy setup

%3CLINGO-SUB%20id%3D%22lingo-sub-656823%22%20slang%3D%22en-US%22%3EPermission%20clarification%20for%20O365%20Group%20expiration%20policy%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-656823%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20not%20sure%20if%20this%20is%20our%20tenant%20or%20if%20something%20else%20might%20be%20going%20on...%20I%20have%20the%20user%20administration%20AAD%20role%20applied%20to%20an%20account%2C%20and%20when%20I%20attempt%20to%20use%20that%20account%20to%20create%20an%20expiration%20policy%20on%20an%20O365%20Group%2C%20the%20form%20is%20completely%20disabled%20for%20that%20user.%20I%20verified%20that%20a%20Global%20Admin%20account%20was%20able%20to%20setup%20a%20policy.%20So%2C%20looking%20to%20verify%20if%26nbsp%3B%20there%20is%20something%20in%20the%20documentation%20that%20is%20incorrect%20or%20misleading%3F%20Am%20I%20missing%20something%20else%20altogether%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20the%20article%20I'm%20referencing%20for%20the%20permissions%20needed%20(under%20Who%20can%20configure...)%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fcreate-groups%2Foffice-365-groups-expiration-policy%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fadmin%2Fcreate-groups%2Foffice-365-groups-expiration-policy%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere's%20a%20secondary%20article%20that%20states%20and%20OR%20between%20Global%20Admin%20and%20User%20Admin%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FPremier-Field-Engineering%2FO365-Groups-Tidbit-Expiration-Policy-for-O365-Groups%2Fba-p%2F571924%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FPremier-Field-Engineering%2FO365-Groups-Tidbit-Expiration-Policy-for-O365-Groups%2Fba-p%2F571924%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-656823%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGroups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-657416%22%20slang%3D%22en-US%22%3ERe%3A%20Permission%20clarification%20for%20O365%20Group%20expiration%20policy%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-657416%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20the%20user%20have%20an%20AAD%20Premium%20license%20assigned%3F%20I%20haven't%20tried%20using%20a%20User%20admin%20for%20this%20task%2C%20but%20generally%20speaking%20they%20do%20have%20limited%20set%20of%20group-related%20permissions%2Ftasks%20assigned%2C%20compared%20to%20GAs.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-658819%22%20slang%3D%22en-US%22%3ERe%3A%20Permission%20clarification%20for%20O365%20Group%20expiration%20policy%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-658819%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20don't%20believe%20I%20have%20an%20AAD%20Premium%20License%20assigned%20to%20that%20account%20-%20I%20will%20see%20if%20our%20GA%20can%20set%20that%20up%20temporarily...%20well%20now%20that%20I%20think%20of%20it%20though%20user%20admin%20will%20have%20that%20ability.%20I'll%20just%20make%20sure%20he's%20OK%20with%20me%20making%20that%20change%20before%20going%20forward.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-660861%22%20slang%3D%22en-US%22%3ERe%3A%20Permission%20clarification%20for%20O365%20Group%20expiration%20policy%20setup%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-660861%22%20slang%3D%22en-US%22%3E%3CP%3EStill%20wondering%20if%20this%20might%20be%20a%20license%20problem.%20I%20got%20an%20AAD%20Premium%20license%20assigned%20to%20the%20account%20and%20the%20fields%20were%20still%20disabled.%20Also%20wonder%20if%20GA%20access%20might%20completely%20override%20and%20grant%20the%20access%20level%20needed.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

I'm not sure if this is our tenant or if something else might be going on... I have the user administration AAD role applied to an account, and when I attempt to use that account to create an expiration policy on an O365 Group, the form is completely disabled for that user. I verified that a Global Admin account was able to setup a policy. So, looking to verify if  there is something in the documentation that is incorrect or misleading? Am I missing something else altogether?

 

This the article I'm referencing for the permissions needed (under Who can configure...):

https://docs.microsoft.com/en-us/office365/admin/create-groups/office-365-groups-expiration-policy?v...

 

Here's a secondary article that states and OR between Global Admin and User Admin:
https://techcommunity.microsoft.com/t5/Premier-Field-Engineering/O365-Groups-Tidbit-Expiration-Polic...

 

Thanks

3 Replies

Does the user have an AAD Premium license assigned? I haven't tried using a User admin for this task, but generally speaking they do have limited set of group-related permissions/tasks assigned, compared to GAs.

@Vasil Michev I don't believe I have an AAD Premium License assigned to that account - I will see if our GA can set that up temporarily... well now that I think of it though user admin will have that ability. I'll just make sure he's OK with me making that change before going forward.

Still wondering if this might be a license problem. I got an AAD Premium license assigned to the account and the fields were still disabled. Also wonder if GA access might completely override and grant the access level needed.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
48 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies