We're still going through our termination process. We've got most of it mapped out but hit something strange.
The people who do this have the following roles in AAD:
- Help Desk Administrator,
- License Adminstrator,
- Password Administrator (needed for 'initiate sign out')
- SharePoint Administrator (needed for OneDrive sharing)
- User Administrator
In Office Admin, if they use the 'delete' on the user, it should:
- Show them the licenses that will be removed (works for a global admin, doesn't work for this person)
- Checkbox prompt to share the user OneDrive (works)
- Delete the user (errors but expected in our case since we are synced with AD)
It's not telling them it's removing the existing license. However, if they do that step separately through the GUI, they have no problem - which is expected because they have the License Admin role.
Does the delete script on a user in Office Admin need a different role to remove licenses?
