Global Admin not in Organization Management

%3CLINGO-SUB%20id%3D%22lingo-sub-251336%22%20slang%3D%22en-US%22%3EGlobal%20Admin%20not%20in%20Organization%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-251336%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20synched%20a%20few%20test%20accounts%20from%20our%20onsite%20AD%20and%20made%20one%20of%20them%20a%20global%20admin.%20That%20account%20can't%20see%20some%20features%20in%20the%20Security%20%26amp%3B%20Compliance%20center%20unless%20they're%20added%20to%20Organization%20Management.%20My%20understanding%20is%20that%20members%20of%20global%20admin%20are%20in%20Organization%20Management%20by%20default.%20Is%20there%20something%20I'm%20missing%3F%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EThanks%2C%3CBR%20%2F%3EBrenden%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-251336%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-251355%22%20slang%3D%22en-US%22%3ERe%3A%20Global%20Admin%20not%20in%20Organization%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-251355%22%20slang%3D%22en-US%22%3E%3CP%3EThere's%20a%20difference%20between%20Role%20Groups%20in%20Exchange%20and%20the%20SCC%20ones.%20The%20Global%20Admins%20are%20indeed%20added%20to%20Organizational%20Management%20for%20EAC%20as%20part%20of%20the%20TenantAdmins_XXXXX%20group%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%3EGet-RoleGroupMember%20%22Organization%20Management%22%0A%0AName%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20RecipientType%0A----%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20-------------%0ATenantAdmins_c25d1%20Group%3C%2FPRE%3E%0A%3CP%3EThis%20it%20not%20true%20for%20the%20SCC%20role%20group%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%3EGet-RoleGroupMember%20OrganizationManagement%0A%0AName%20%20%20%20%20%20%20%20%20RecipientType%0A----%20%20%20%20%20%20%20%20%20-------------%0AVasil%20Michev%20MailUser%3C%2FPRE%3E%0A%3CP%3ESo%20yeah%2C%20you%20have%20to%20add%20them%20manually.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We synched a few test accounts from our onsite AD and made one of them a global admin. That account can't see some features in the Security & Compliance center unless they're added to Organization Management. My understanding is that members of global admin are in Organization Management by default. Is there something I'm missing?


Thanks,
Brenden

1 Reply

There's a difference between Role Groups in Exchange and the SCC ones. The Global Admins are indeed added to Organizational Management for EAC as part of the TenantAdmins_XXXXX group:

 

Get-RoleGroupMember "Organization Management"

Name               RecipientType
----               -------------
TenantAdmins_c25d1 Group

This it not true for the SCC role group:

 

Get-RoleGroupMember OrganizationManagement

Name         RecipientType
----         -------------
Vasil Michev MailUser

So yeah, you have to add them manually.