Microsoft 365 - Managing Authorized Administrator of a service or resource account

You can make it more convenient to administer your domain's Office 365 service and resource accounts by delegating administration of individual service and resource accounts to other NetIDs. Assigning a NetID as an Authorized Administrator grants that NetID with Domain Administrator privileges over the account.

For more information on the features available for administrators and how to use them, please see: Microsoft 365 - Administrative Functions

Note for administrators: In order to administer another NetID account in the Wisc Account Administration site, you must have administrative access over the account. To request administrative access over an account, follow these instructions. End users can also grant administrative access. Once administrative access has been granted, you can administer the account.

If you are requesting access to administer service or resource accounts, please follow steps outlined at Microsoft 365 - Request Group for Administrative Access.

If a NetID is already the administrator of a domain, it can administer all service accounts within that domain. If it is not the administrator of the domain, it is still possible to assign that NetID administration privileges over one or more service accounts within the domain. A NetID that has been granted administrative rights to an Office 365 service account, but not the entire domain the service account exists in, is called an "authorized administrator" of that service account.

Important: Authorized Administrators have full administrative privileges over the service account. This includes the ability to:

  • Delete the account
  • Add/Remove Authorized Administrators
  • Link/Unlink NetIDs
  • Add/Remove full mailbox/send as/send on behalf permissions
  • Change primary address
  • Delete alternate addresses
  • Show/Hide account from GAL
  • Enable/Disable Web Login
  • Reset passwords
  • Add/Remove forwarding address
  • View inbox rules, junk mail settings, and other account information

Note: These actions can only be performed by a user who has administrative privileges over the service account. This means either those who are a domain administrator of the service account's domain, or those who have already been designated as an authorized administrator of this service account.

 

If a NetID is already the administrator of a domain, it can administer all resource accounts within that domain. If it is not an administrator of the domain, it is still possible to assign that NetID administration privileges over one or more resource accounts within the domain. A NetID that has been granted administrative rights to an Office 365 resource account, but not the entire domain the service account exists in, is called an "authorized administrator" of that resource account.

Important: Authorized Administrators have full administrative privileges over the resource account. This includes the ability to:

  • Add/remove Authorized Administrators
  • Edit the resource - change name, owner email, description
  • Manage Calendar Processing settings
  • Calendar Access - manage additional owners

 
 


Keywords:
microsoft office365 o365 m365 microsoft 365 administer admin administrate administrator authorized netid remove removing adding grant delegate uw-madison google apps resource accounts setting service access
Doc ID:
61302
Owned by:
O365 S. in Microsoft 365
Created:
2016-02-29
Updated:
2024-08-09
Sites:
DoIT Help Desk, Google Apps, Microsoft 365, Wisc Account Admin