Azure and Office 365 From Administrator and User Perspective.

jskfan
jskfan used Ask the Experts™
on
Azure and Office 365 From Administrator and User Perspective.

If I understand Microsoft Azure  can involve many Administrators to manage their own areas (DBA, Virtualization Administrator, Active Directory Administrator ,etc...)
Office 365 Administrator seems to me that it can be a subset of Active Directory Administrator as they can manage users and Groups , email accounts in addition to billing and other things.

 -- Now, who gives right to someone to be Office 365 Administrator ? is it done by Azure Active Directory Administrator ?
-- who gives rights to someone to be Azure Active Directory Administrator ?
--- Do we need special infrastructure to have Office 365 Administrator and Azure Administrator ? I mean do we need to have ADFS in the company ? do we need to have AD connector to connect to  Azure ?

Thank you
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sr. Architect | Consulting
Commented:
All managed by office 365 GLOBAL Administrator. That role is given to the account used to sign up and can be added to any other account or different, less powerful roles e.g. exchange roles only or custom roles). You do not need ADFS and I generally don't like it but I would recommend aad connect so you don't have to manage accounts in 2 locations but again depends but I almost always use this route. There are lots of configuration options with aad connect. Hash, passthrough, sso ECT. All aad connect does is sync your windows directory accounts into azure ad. It doesn't give you Azure ad (you get that with every office 365 tenant). Said connect also allows you to use your on prem passwords and policies to log in to office 365. Any account synced too office 365 can be promoted to an administrative role by another global admin.

Author

Commented:
OK Office 365 Administrator is the one capable of setting Azure AD Connector  and login to both Office 365 Admin Center and Azure Admin Center or just Azure Active Directory node.

How does the Office 365 Administrator get that role ?
Alan CoxSr. Architect | Consulting

Commented:
by default, the office 365 global admin can and does manage azure AD. so the global admin role pretty much has all power across the ecosystem. the first person to sign up for a new tenant by default will be this global admin. another global admin or the global admin account can I sign any other user this role
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Author

Commented:
Thanks..
Azure Admin Console, manages not only Active Directory. it Manages Virtualization, Database, if I m not wrong it manages also Storage and Networking.... So do we need Administrator for each of those areas (AD, DB,Virtualization, Networking,Storage..etc...)
Alan CoxSr. Architect | Consulting

Commented:
you can have specific admins for different parts of azure or a single admin for all of it. just depends on your subscription as to the features available. but by default, tenant/global admin manages all services in the tenant.

Author

Commented:
I meant each area requires specific expertise.. Active Directory Admin probably does not know about managing Storage or Databases...
Azure Console, seems like one glass pane for several Admins to manage their areas.
Office 365 Console, is geared towards Active Directory Admin, as it is about Users/Computers Accounts, and  Exchange

Author

Commented:
Thank you for your help!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial