| For example, if you want someone to reset employee passwords you shouldn't assign the unlimited global admin role, you should assign a limited admin role, like Password admin or Helpdesk admin | The first three service areas can be independently selected for connectivity |
|---|---|
| The Microsoft 365 admin center lets you manage Azure AD roles and Microsoft Intune roles | Select the Permissions tab to view the detailed list of what admins assigned that role have permissions to do |
License admin Assign the License admin role to users who need to assign and remove licenses from users and edit their usage location.
6| Endpoint data below lists requirements for connectivity from a user's machine to Office 365 | But the global admin has almost unlimited access to your org's settings and most of the data, so we also recommend that you don't have more than 4 global admins because that's a security threat |
|---|---|
| This will help keep your data secure | You may notice some duplication in IP Address ranges where there are different ports listed |
| By default, we first show roles that most organizations use | They, in turn, can assign users in your company, or their company, admin roles |
|---|---|
| Before you begin Looking for the full list of detailed Azure AD role descriptions you can manage in the Microsoft 365 admin center? Use: our proxy Start with to understand our recommendations for managing network connectivity using this data | Endpoints may also be updated during the month if needed to address support escalations, security incidents, or other immediate operational requirements |
You can read about these categories and guidance for management of them at.
25