Role for PowerShell to SharePoint Online Management Shell and OneDrive Admin Center

[adrien_itr]

Hello,

I'm "global reader" on my tenant, but I can't access https://admin.onedrive.com (it says "access refused"). On another tenant, I'm "Global admin" and I have access to this screen.

And it seems I can't connect with PowerShell to Sharepoint Online Management Shell either : first I have a message about "non-approved verbs" while importing the module, and second when I try a connection, I have a message "Connect-SPOService : Current user is not a tenant administrator." On the other tenant where I'm "global admin", I can access the PS admin.

Can you help me please ? "Global reader" isn't supposed to be "read-only Global admin" ? Do I also need "Sharepoint admin" (though it is included in "global reader" as far as I know...) role to use PowerShell ?

Thanks !

Regards,

Adrien

[#2]

@adrien_itr 

The fact that it's not working with the OneDrive Admin Center is mentioned in the official documentation, so I'd say this is normal you get an error: Administrator role permissions in Azure Active Directory 

However, I've opened an issue on the docs because after testing on my side, it wasn't working with SPO Admin Center either nor PowerShell.

Best thing to do at this point is Global Reader + SPO Admin role 🤷🏻‍:female_sign:

[#3]

@Veronique Lengelle 

Hello Veronique,

Thanks for your answer.

Indeed, I missed that point about the Global Reader role. However, on the tests I did on a test tenant, even the SPO Admin role wans't enough to access the Onedrive Admin Center (but probably, I didn't wait enough for the role to fully dispatched on all Microsoft's datacenters...).

The fact that you encounter this issue with Powershell is indeed a problem I encountered as well. I hope this will be fixed ASAP. Thanks for the link you provided ; I will follow this issue.

Thanks !

Regards,

Adrien