Regresar
-
Título
Minimum permissions for the Active Roles Azure Service Account used by the Active Roles Administration Service -
Descripción
The Global Administrator role recommended in the Active Roles Azure Administration Guide is a highly privileged role. Is there an alternate configuration that will allow expected functionality in Active Roles?
-
Resolución
WORKAROUND
Create an Active Roles Azure Service account with the following Azure roles:
- Application Administrator
- User Administrator
- Exchange Administrator
The Application Administrator role can be removed after the successful configuration of the product if desired. Only the User Administrator andExchange Administrator roles are necessary for day-to-day functionality.