SOLVED

Delegate access for Advanced Security Management

Copper Contributor

Hi

 

How do I give someone access to Advanced Security Management without giving them Office 365 global administrator ?

There is getting started guide for ASM

It says: "You get started with Advanced Security Management by signing in to Office 365 as a Global Administrator or Security Administrator for Advanced Security Management, and turning on the feature... "

 

What is this role "Security Administrator for Advanced Security Management" and how can I add members to it ?

I cannot find any documentation that would describe it.

Searching google for "Security Administrator for Advanced Security Management" returns two results, both pointing to the getting started guide Smiley Indifferent

4 Replies

I think it's just another case of the documentation being well ahead of actual feature rollout.

Get your Admin to asign you compliance manager or security manager role. You will also need some exchange on line roles. Even if you do not use exchange online.
best response confirmed by GrzeWier (Copper Contributor)
Solution

Security Admin is a MSOL (MS Online) role and you can manage it via the MS Online Powershell.

First dump the roles:

Get-MSOLRole

Next locate the ObjectID for the Security Administrator role and copy that.

Now run get-MSOLRoleMember to view who has this role 

To add you run:

Set-MSOLRoleMember -ObjectID <value> -RoleMemberEmailAddress <value>

 

Hope this helps.

For those coming after, the actual syntax is:

Add-MSOLRoleMember -RoleObjectID <ObjectID> -RoleMemberEmailAddress <EmailAddress>

1 best response

Accepted Solutions
best response confirmed by GrzeWier (Copper Contributor)
Solution

Security Admin is a MSOL (MS Online) role and you can manage it via the MS Online Powershell.

First dump the roles:

Get-MSOLRole

Next locate the ObjectID for the Security Administrator role and copy that.

Now run get-MSOLRoleMember to view who has this role 

To add you run:

Set-MSOLRoleMember -ObjectID <value> -RoleMemberEmailAddress <value>

 

Hope this helps.

View solution in original post