Forum Discussion
Solved
Guest user with Global admin role
Hi I was, a while ago, told by an MVP that the "correct" way for granting External Consultants access to O365 - was to create them as 'Guest users' (and using their private/corporate email) and ...
I'm with Juan here. While you can technically add admin roles to guest users or even create mailboxes for them, I've never seen a statement from Microsoft that this is supported. In fact, the only place I've seen Guest admin access work is the (old) Office 365 Admin Center.
Okay, it has been over a year since this was initially raised. Has Microsoft addressed this issue? They, and the MVPs push the "guest" account access fairly heavily, but if the user can't access the required resources with a guest account, even with GA privileges, then we are left to create a member account and the user is required to track an additional set of credentials. This would seem to defeat the entire purpose of guest accounts.
Unfortunately this isn't resolved yet. Delegated Admin privileges works towards resolving this for CSP partners but granular permissions (GDAP) are not available (yet!)
https://practical365.com/identifying-potential-unwanted-access-by-your-msp-csp-reseller/
https://practical365.com/identifying-potential-unwanted-access-by-your-msp-csp-reseller/
