Nov 16 2016
- last edited on
Feb 19 2021
How do I give someone access to Advanced Security Management without giving them Office 365 global administrator ?
There is getting started guide for ASM
It says: "You get started with Advanced Security Management by signing in to Office 365 as a Global Administrator or Security Administrator for Advanced Security Management, and turning on the feature... "
What is this role "Security Administrator for Advanced Security Management" and how can I add members to it ?
I cannot find any documentation that would describe it.
Searching google for "Security Administrator for Advanced Security Management" returns two results, both pointing to the getting started guide
Nov 16 2016 07:10 PM
I think it's just another case of the documentation being well ahead of actual feature rollout.
Nov 28 2016 02:49 PM
Jan 01 2017 08:32 AMSolution
Security Admin is a MSOL (MS Online) role and you can manage it via the MS Online Powershell.
First dump the roles:
Next locate the ObjectID for the Security Administrator role and copy that.
Now run get-MSOLRoleMember to view who has this role
To add you run:
Set-MSOLRoleMember -ObjectID <value> -RoleMemberEmailAddress <value>
Hope this helps.
Aug 24 2017 09:17 AM
For those coming after, the actual syntax is:
Add-MSOLRoleMember -RoleObjectID <ObjectID> -RoleMemberEmailAddress <EmailAddress>