Managing Roles in Microsoft 365
Microsoft 365
Apr 23, 2023 6:30 PM

Managing Roles in Microsoft 365

by HubSite 365 about Peter Rising [MVP]

Microsoft MVP | Author | Speaker | YouTuber

External YouTube Channel
Pro User

SecurityMicrosoft 365Learning Selection

In this video we continue to follow the study guide for the new Microsoft MS-102 certification exam (currently in beta)

In this video we continue to follow the study guide for the new Microsoft MS-102 certification exam (currently in beta). So you can learn M365 and study for a new certification all at the same time!

Important note: This series is not a complete guide to the MS-102 exam guide. Links to further relevant reading are included with each video.

Here we talk about and demonstrate the process for managing roles in your Microsoft 365 tenant. You will learn how to:

  • Understand the roles and role types in Microsoft 365
  • Manage roles in the various portals & admin centers
  • Understand and manage Administrative Units
  • Use PowerShell to manage access to roles
  • Assign roles to users with Azure AD Privileged Identity Management (PIM)

When you have completed these steps, you will understand how to manage Azure AD, Microsoft 365 Defender, and Microsoft Purview roles in the M365 Admin center, the Azure AD Portal, the Microsoft Entra Admin center, and with PowerShell using MS Graph.

Managing roles in Microsoft 365

Microsoft 365 is a suite of services that enables organizations to collaborate, communicate, and manage their business operations. It includes a range of tools, such as Exchange Online, SharePoint Online, and Teams, that enable you to share documents, work together on projects, and create a connected, secure work environment.

Managing roles in Microsoft 365 is an important part of ensuring that users have the right access to the right resources. Microsoft 365 provides various tools that can be used to manage roles, such as the role-based access control (RBAC) feature, which allows you to assign roles to users and groups. You can also use the Microsoft 365 admin center to manage roles and permissions across your entire organization. Additionally, you can use the Azure Active Directory (Azure AD) to manage user access to specific applications and services. With Azure AD, you can set up security groups, assign roles, and control access to resources.

Assign Azure AD roles to users:


List Azure AD role assignments:


Assign admin roles in the Microsoft 365 admin center:


Assign admin roles to Microsoft 365 user accounts with PowerShell:


Assign user roles with Azure Active Directory: