Home

Executing Powershell in o365 other than using Individual Admin accounts or accounts with GA rights

%3CLINGO-SUB%20id%3D%22lingo-sub-548925%22%20slang%3D%22en-US%22%3EExecuting%20Powershell%20in%20o365%20other%20than%20using%20Individual%20Admin%20accounts%20or%20accounts%20with%20GA%20rights%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-548925%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20wanted%20to%20know%20the%20best%20practice%20for%20running%20Powershell%20in%200365%20services.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERequirement%3A%26nbsp%3B%3C%2FP%3E%3CP%3ENeed%20to%20perform%20admin%20activities%20using%20powershell%20.Mostly%20our%20team%20will%20be%20connecting%20to%20following%20modules%20(SPO%2C%20Teams%2C%20MSonline)%20sometimes%20SFB%20online%20.%20Everyone%20in%20the%20team%20doesn't%20have%20global%20admin%20rights%20and%20they%20might%20not%20have%20access%20for%20more%20than%20one%20service%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eso%20we%20have%20to%20rely%20on%20GA%20to%20execute%20some%20scripts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20other%20option%20besides%20granting%20GA%20access%20%3F%20Like%20creating%20an%20APP%20and%20granting%20required%20permissions%2C%20and%20then%20using%20APP%20to%20connect%20to%20required%20service%20(SPO%20or%20Teams%20or%20SFB)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ERegards%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3ESanthosh%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%26nbsp%3B%20%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-548925%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Esankaran%40amgen.com%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-714985%22%20slang%3D%22en-US%22%3ERe%3A%20Executing%20Powershell%20in%20o365%20other%20than%20using%20Individual%20Admin%20accounts%20or%20accounts%20with%20GA%20righ%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-714985%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F164570%22%20target%3D%22_blank%22%3E%40Santhosh%20Sankaran%3C%2FA%3E%26nbsp%3B%20I%20think%20azure%20runbook%20does%20exactly%20that.%20you%20create%20scripts%20that%20run%20using%20an%20admin%20account%20and%20can%20give%20others%20permission%20to%20run%20those%20scripts.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Santhosh Sankaran
Occasional Contributor

Hi ,

 

I wanted to know the best practice for running Powershell in 0365 services.

 

Requirement: 

Need to perform admin activities using powershell .Mostly our team will be connecting to following modules (SPO, Teams, MSonline) sometimes SFB online . Everyone in the team doesn't have global admin rights and they might not have access for more than one service either.

 

so we have to rely on GA to execute some scripts.

 

Is there any other option besides granting GA access ? Like creating an APP and granting required permissions, and then using APP to connect to required service (SPO or Teams or SFB)

 

Regards

Santhosh

   

1 Reply

@Santhosh Sankaran  I think azure runbook does exactly that. you create scripts that run using an admin account and can give others permission to run those scripts.

Related Conversations