Oct 25 2016 04:57 AM
The description of the User Managment Admin role is: Resets passwords, monitors service health, and manages user accounts, and service requests. The user management admin can’t delete a global admin, create other admin roles, or reset passwords for billing, global, and service admins.
I'm looking for more context around actions involved for 'managing user accounts'. We have a service account with the Global Admin role that we use for managing users and licensing via PowerShell; and our app Admins are Service Admins and can monitor service health and the mssage center. I'm not certain we need anyone assigned the User Mgmt role, just want clarification on specific actions inovled in 'managing user accounts' to understand if we have scenarios internally where we'd want someone in that role vs using our Global Admin service account to manage user accounts via powershell.
Oct 25 2016 06:16 AM
Also, what roles have others assigned their help desk or Tier 3 people?
Oct 25 2016 07:33 AM
Oct 25 2016 01:05 PM
The difference is that they cannot make (some) changes to any GA account (or elevate user accounts). So it's not that easy to abuse the role and it's more appropriate for 1st/2nd level support or for anyone doing some daily tasks in the portal or via PowerShell.
Nov 18 2016 11:00 AM