Jun 18 2018 09:35 AM
I'd like to get a list of all users with elevated privileges in Office 365. Is there a PowerShell command that would provide this? Or what is the best way to obtain such a list?
Jun 18 2018 09:48 AM
Define "Office 365"? :) Do you want a list of permissions as seen in the O365 Admin center only, or do you want to check on any app-specific permissions (Exchange roles, SfB roles, SPO SC admins, etc)?
For the former, you can use PowerShell to generate a report. Get-MsolRole will give you a list of all the admin roles, and Get-MsolRoleMember will give you a list of any users assigned given role. If you want to include scoped roles (AUs), you can also add the info from Get-MsolScopedRoleMember.
For the latter scenario, there is no single, or simple solution. You will have to use the tools exposed by each workload and craft a report.