Displaying the Microsoft Entra ID administration role overview
Use this task to obtain an overview of the most important information about an administrator role.
To obtain an overview of a administration role
-
In the Manager, select the Microsoft Entra ID > Administrator roles category.
-
Select the administrator role in the result list.
-
Select the Microsoft Entra ID administrator role overview task.
Microsoft Entra ID administrative units
Microsoft Entra ID allows you to create and manage administrative units. Administrative units allow you to control and restrict role permissions in areas of your organization that you define. You can use an administrative unit to manage devices, users, and groups.
For more information, see Creating and editing Microsoft Entra ID user accounts and Editing main data of Microsoft Entra ID groups.
To create an administrative unit
-
In the Manager, select the Microsoft Entra ID > Administrative units category.
-
Click in the result list.
-
On the main data form, edit the main data of the administrative unit.
-
Save the changes.
To edit main data of administrative units
-
In the Manager, select the Microsoft Entra ID > Administrative units category.
-
Select the Change main data task.
-
On the main data form, edit the main data of the administrative unit.
-
Save the changes.
Editing main data of administrative units
Enter the following general main data.
Table 42: General main data
Display name |
The display name is used to display the administrative unit in the One Identity Manager tools' user interface. |
Client |
Microsoft Entra ID tenant of the administrative unit. |
Owner (Application Role) |
Application roles whose members can configure the administrative unit. |
Visibility |
Specifies which users can see the group. |
Description |
Text field for additional explanation. |
Assigning user accounts to administrative units
You can assign user accounts to administrative units and use an administrative unit to manage these user accounts' role eligibilities.
To assign user accounts directly to an administrative unit
-
In the Manager, select the Microsoft Entra ID > Administrative units category.
-
Select the administrative unit in the result list.
-
In the Add assignments pane, assign the user accounts.
TIP: In the Remove assignments pane, you can remove assigned user accounts.
To remove an assignment
-
Save the changes.