Return
-
Title
Minimum permissions for the Active Roles Azure Service Account used by the Active Roles Administration Service -
Description
The Global Administrator role recommended in the Active Roles Azure Administration Guide is a highly privileged role. Is there an alternate configuration that will allow expected functionality in Active Roles?
-
Resolution
WORKAROUND
Create an Active Roles Azure Service account with the following Azure roles:
- Application Administrator
- User Administrator
- Exchange Administrator
The Application Administrator role can be removed after the successful configuration of the product if desired. Only the User Administrator andExchange Administrator roles are necessary for day-to-day functionality.