Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

List of all users with elevated privileges

Steel Contributor

I'd like to get a list of all users with elevated privileges in Office 365.  Is there a PowerShell command that would provide this?  Or what is the best way to obtain such a list?

2 Replies

Define "Office 365"? :) Do you want a list of permissions as seen in the O365 Admin center only, or do you want to check on any app-specific permissions (Exchange roles, SfB roles, SPO SC admins, etc)?

 

For the former, you can use PowerShell to generate a report. Get-MsolRole will give you a list of all the admin roles, and Get-MsolRoleMember will give you a list of any users assigned given role. If you want to include scoped roles (AUs), you can also add the info from Get-MsolScopedRoleMember.

 

For the latter scenario, there is no single, or simple solution. You will have to use the tools exposed by each workload and craft a report.

Both, thanks!