Home

Partner Access to a Client's Admin Portal -> Disabling Multi-Factor Authentication

%3CLINGO-SUB%20id%3D%22lingo-sub-278144%22%20slang%3D%22en-US%22%3EPartner%20Access%20to%20a%20Client's%20Admin%20Portal%20-%26gt%3B%20Disabling%20Multi-Factor%20Authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-278144%22%20slang%3D%22en-US%22%3E%3CP%3EWe're%20a%20MSP%20and%20have%26nbsp%3Bbeen%20granted%26nbsp%3Bdelegated%20access%20to%20our%20client's%20O365%20tenant%20as%20their%20%22partner%20of%20record%22.%20When%20accessing%20their%20admin%20center%2C%20using%20our%20own%26nbsp%3Bpartner%20O365%20credentials%2C%20everything%20works%20fine%20EXCEPT%20the%20option%20to%20manage%20MFA%20(the%20link%20in%20the%20Active%20User%20List%20at%20the%20bottom)%20is%20missing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20login%20with%20an%20admin%20account%20that%20is%20part%20of%20their%20O365%20Tenant%2C%20I%20can%20see%20the%20MFA%20link%20fine.%20It's%20only%20when%20using%20any%20of%20our%20accounts%20that%20are%20part%20of%20our%20company%20(which%20is%20their%20partner%20of%20record)%2C%20is%20MFA%20is%20missing.%20Everything%20else%26nbsp%3Bworks%20fine.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EManaging%20MFA%20is%20a%20pretty%20common%20support%20request.%20I'm%20trying%20to%20keep%20accountability%20for%20my%20support%20engineers%20by%20us%20using%20our%20own%20accounts%20vs%20us%20all%20logging%20in%20with%20their%20admin%20account%20(in%20which%20case%20there%20is%20no%20accountability).%26nbsp%3BIs%20this%20by%20design%20or%20am%20I%20missing%20something%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-278144%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%20Center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354524%22%20slang%3D%22en-US%22%3ERe%3A%20Partner%20Access%20to%20a%20Client's%20Admin%20Portal%20-%26gt%3B%20Disabling%20Multi-Factor%20Authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354524%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Brian%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3EGo%20to%20the%20Partner%20Center.%3C%2FLI%3E%3CLI%3ESelect%20the%20customer.%3C%2FLI%3E%3CLI%3EIn%20the%20Service%20Management%20option%2C%20select%20Azure%20Active%20Directory%20in%20the%20Administer%20services.%3C%2FLI%3E%3CLI%3EGo%20to%20Users%20option%20and%20check%20if%20you%20are%20able%20to%20management%20MFA%20from%20there.%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20think%20the%20MFA%20option%20for%20delegate%20administrator%26nbsp%3Bis%20present%20in%20the%20Office%20365%20Admin%20center%20instead%20you%20can%20use%20Azure%20AD%20for%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20works%2C%20let%20me%20know%20in%20case%20of%20any%20issues.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Brian Martin
New Contributor

We're a MSP and have been granted delegated access to our client's O365 tenant as their "partner of record". When accessing their admin center, using our own partner O365 credentials, everything works fine EXCEPT the option to manage MFA (the link in the Active User List at the bottom) is missing.

 

If I login with an admin account that is part of their O365 Tenant, I can see the MFA link fine. It's only when using any of our accounts that are part of our company (which is their partner of record), is MFA is missing. Everything else works fine.

 

Managing MFA is a pretty common support request. I'm trying to keep accountability for my support engineers by us using our own accounts vs us all logging in with their admin account (in which case there is no accountability). Is this by design or am I missing something?

1 Reply
Highlighted

Hi Brian, 

 

  1. Go to the Partner Center.
  2. Select the customer.
  3. In the Service Management option, select Azure Active Directory in the Administer services.
  4. Go to Users option and check if you are able to management MFA from there.

 

I don't think the MFA option for delegate administrator is present in the Office 365 Admin center instead you can use Azure AD for this.

 

Hope this works, let me know in case of any issues.

Related Conversations
Group and User Mix-up
Ruby_Monday in Office 365 on
3 Replies
Multi table query
sundarzee in Access on
2 Replies
Ports
Rising Flight in Office 365 on
0 Replies