SOLVED

Printer Administrator Role

%3CLINGO-SUB%20id%3D%22lingo-sub-1253256%22%20slang%3D%22en-US%22%3EPrinter%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1253256%22%20slang%3D%22en-US%22%3E%3CP%3EPrint%20Administrator%20role%20is%20missing%20in%20my%20tenant.%20How%20do%20I%20get%20it%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1256637%22%20slang%3D%22en-US%22%3ERe%3A%20Printer%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1256637%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F73211%22%20target%3D%22_blank%22%3E%40Srini%20Rautwar%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EThanks%20for%20your%20patience%20while%20we%20work%20towards%20enabling%20the%20Printer%20Administrator%20Role%20through%20the%20UI%20portal.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20the%20meantime%2C%20you%20can%20enable%20the%20role%20through%20PowerShell%20using%20the%20following%20steps%3A%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20font-family%3A%20Calibri%3B%20font-size%3A%2011.0pt%3B%22%3E%3CFONT%20size%3D%224%22%3EFrom%20Admin%20PowerShell%20prompt%3A%3C%2FFONT%3E%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%20id%3D%22toc-hId--1383128147%22%3EInstall%20PowerShell%20module%20to%20enable%20management%20of%20Azure%20AD%3C%2FH2%3E%0A%3CP%3E1)%20Install-Module%20-Name%20AzureAD%3C%2FP%3E%0A%3CP%3ENote%3A%20will%20need%20to%20accept%20to%20install%20the%20module%20from%20PSGallery%2C%20which%20is%20an%20untrusted%20repository%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%20id%3D%22toc-hId-1104384686%22%3EConnect%20to%20Azure%20tenant%3C%2FH2%3E%0A%3CP%3E2)%20Connect-AzureAD%3C%2FP%3E%0A%3CP%3ENote%3A%20use%20the%20Global%20Admin%20user%20account%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%20id%3D%22toc-hId--703069777%22%3EDouble%20check%20if%20Printer%20Administrator%20role%20is%20already%20enabled%20or%20not%3C%2FH2%3E%0A%3CP%3E3)%20Get-AzureADDirectoryRole%3C%2FP%3E%0A%3CP%3ENote%3A%20if%20you%20see%20%22Printer%20Administrator%22%20in%20the%20results%20then%20it%20is%20enabled%20and%20can%20just%20start%20adding%20members.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20do%20NOT%20see%20%22Printer%20Administrator%22%20in%20the%20results%2C%20run%3A%3C%2FP%3E%0A%3CP%3EEnable-AzureADDirectoryRole%20-RoleTemplateId%20%22644ef478-e28f-4e28-b9dc-3fdde9aa0b1f%22%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%20id%3D%22toc-hId-1784443056%22%3EAdd%20user%20accounts%20to%20be%20Printer%20Administrators%3C%2FH2%3E%0A%3CP%3E4)%20Add-AzureADDirectoryRoleMember%20-ObjectId%20%2283e34fcb-2028-40f0-8d37-f84ebd9ece84%22%20-RefObjectId%20%221319811c-4837-4e2e-bf62-45c80a3dd0c4%22%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENote%3A%20The%20ObjectId%20value%20is%20the%20Printer%20Administrator%20role%20object%20from%20the%20%22Get-AzureADDirectoryRole%22%20call.%26nbsp%3B%20In%20my%20test%20tenant%20it%20is%20%2283e34fcb-2028-40f0-8d37-f84ebd9ece84%22.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENote%3A%20The%20RefObjectId%20value%20is%20the%20user%20account's%20object%20ID%20in%20Azure%20AD.%26nbsp%3B%20This%20can%20be%20found%20if%20you%20log%20into%20the%20Azure%20portal%20%22%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fportal.azure.com%3C%2FA%3E%22%20and%20find%20the%20specific%20user%20account.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20complete%20you%20can%20verify%20by%20going%20to%20the%20Azure%20portal%20and%20look%20at%20the%20%22Directory%20role%22%20the%20user%20account%20belongs%20to.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1295843%22%20slang%3D%22en-US%22%3ERe%3A%20Printer%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1295843%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20worked%20that%20way%20for%20me%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FRoleMenuBlade%2FRoleMembers%2FobjectId%2F644ef478-e28f-4e28-b9dc-3fdde9aa0b1f%2FroleName%2FPrinter%2520Administrator%2FroleTemplateId%2F644ef478-e28f-4e28-b9dc-3fdde9aa0b1f%2FadminUnitObjectId%2F%2FcustomRole%2F%2FresourceScope%2F%252F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FRoleMenuBlade%2FRoleMembers%2FobjectId%2F644ef478-e28f-4e28-b9dc-3fdde9aa0b1f%2FroleName%2FPrinter%20Administrator%2FroleTemplateId%2F644ef478-e28f-4e28-b9dc-3fdde9aa0b1f%2FadminUnitObjectId%2F%2FcustomRole%2F%2FresourceScope%2F%252F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EJose%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1317287%22%20slang%3D%22en-US%22%3ERe%3A%20Printer%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1317287%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%0A%3CP%3EYou%20can%20now%20assign%20users%20to%20the%20Printer%20Admin%20role%20through%20the%20AAD%20UI%20portal.%26nbsp%3B%20The%20shortcut%20link%20to%20the%20page%20is%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fpreview.portal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FActiveDirectoryMenuBlade%2FRolesAndAdministrators%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpreview.portal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FActiveDirectoryMenuBlade%2FRolesAndAdministrators%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3EJimmy%20Wu%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1318323%22%20slang%3D%22en-US%22%3ERe%3A%20Printer%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1318323%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F70523%22%20target%3D%22_blank%22%3E%40Jimmy%20Wu%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EOnce%20a%20user%20is%20assigned%20the%20print%20administrator%20role%2C%20approximately%20how%20long%20does%20it%20take%20to%20%22kick%20in%22%3F%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EThank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1319558%22%20slang%3D%22en-US%22%3ERe%3A%20Printer%20Administrator%20Role%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1319558%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F73211%22%20target%3D%22_blank%22%3E%40Srini%20Rautwar%3C%2FA%3E%20The%20new%20admin%20role%20showed%20up%20in%20the%20list%20available%20roles%20in%20Azure%20AD%20without%20any%20manual%20intervention.%20It%20took%20less%20than%20two%20hours%20for%20the%20two%20new%20roles%20to%20show%20up.%3C%2FP%3E%0A%3CP%3E-Thomas%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Print Administrator role is missing in my tenant. How do I get it?

5 Replies

@Srini Rautwar

Thanks for your patience while we work towards enabling the Printer Administrator Role through the UI portal.

 

In the meantime, you can enable the role through PowerShell using the following steps:

From Admin PowerShell prompt:

Install PowerShell module to enable management of Azure AD

1) Install-Module -Name AzureAD

Note: will need to accept to install the module from PSGallery, which is an untrusted repository

 

Connect to Azure tenant

2) Connect-AzureAD

Note: use the Global Admin user account

 

Double check if Printer Administrator role is already enabled or not

3) Get-AzureADDirectoryRole

Note: if you see "Printer Administrator" in the results then it is enabled and can just start adding members.

 

If you do NOT see "Printer Administrator" in the results, run:

Enable-AzureADDirectoryRole -RoleTemplateId "644ef478-e28f-4e28-b9dc-3fdde9aa0b1f"

 

Add user accounts to be Printer Administrators

4) Add-AzureADDirectoryRoleMember -ObjectId "83e34fcb-2028-40f0-8d37-f84ebd9ece84" -RefObjectId "1319811c-4837-4e2e-bf62-45c80a3dd0c4"

 

Note: The ObjectId value is the Printer Administrator role object from the "Get-AzureADDirectoryRole" call.  In my test tenant it is "83e34fcb-2028-40f0-8d37-f84ebd9ece84".

 

Note: The RefObjectId value is the user account's object ID in Azure AD.  This can be found if you log into the Azure portal "https://portal.azure.com" and find the specific user account.

 

Once complete you can verify by going to the Azure portal and look at the "Directory role" the user account belongs to.

Best Response confirmed by Saurabh_Bansal (Microsoft)
Solution

Hi all,

You can now assign users to the Printer Admin role through the AAD UI portal.  The shortcut link to the page is https://preview.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RolesAndAdministr....

 

Regards,

Jimmy Wu

@Jimmy_Wu 


Once a user is assigned the print administrator role, approximately how long does it take to "kick in"?


Thank you

@Srini Rautwar The new admin role showed up in the list available roles in Azure AD without any manual intervention. It took less than two hours for the two new roles to show up.

-Thomas