SOLVED

RBAC for the PowerShell access

Occasional Contributor

Hi all, 

I want to use RBAC to set access to a user that only needs to read the users' MFA information and change it(Disable/Enforced).

I've set the Authentication Admin role to the user but still, the "StrongAuthenticationRequirements" shows empty! 

 

I'm using MSOL module.

Do you have any idea in this case?

 

BR,

Saeid

4 Replies
best response confirmed by Saeid_Abdollahzadeh (Occasional Contributor)
Solution

The MSOL module doesn't support any of the "new" roles, you'll only be able to use a Global admin account with it. Use the Graph API endpoint instead.

@Vasil Michev 

Ok,

Thanks man!

@Vasil Michev 

One more question! 

Which one of the APIs can I use in this case? because I cannot find them that related to the MFA settings

 

Thanks 

Depends on what exactly you are looking for, you can check the authenticationmethods endpoint or the registration one: https://docs.microsoft.com/en-us/graph/api/reportroot-list-credentialuserregistrationdetails?view=gr...