To delete a role eligibility
-
In the Manager, select the Azure Active Directory > Role eligibilities category.
-
Select the role eligibility in the result list.
-
Click in the result list.
- Confirm the security prompt with Yes.
-
Save the changes.
In Azure Active Directory, role eligibilities for groups can be assigned in specified partial scopes. This does not mean that a principal has an active role assignment, but can activate it at any time if necessary.
To assign a system role to scope
-
In the Manager, select the Azure Active Directory > Scoped role eligibilities category.
-
Select the role in the result list.
-
Select the Assign system roles task.
-
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.
To remove an assignment
-
Save the changes.
To assign a business role to a scope
-
In the Manager, select the Azure Active Directory > Scoped role eligibilities category.
-
Select the role in the result list.
-
Select the Assign business roles task.
-
In the Add assignments pane, select the role class and assign business roles.
TIP: In the Remove assignments pane, you can remove assigned business roles.
To remove an assignment
-
Save the changes.
To assign an organization to a scope
-
In the Manager, select the Azure Active Directory > Scoped role eligibilities category.
-
Select the role in the result list.
-
Select the Assign organizations task.
In the Add assignments pane, assign the organizations:
-
On the Departments tab, assign departments.
-
On the Locations tab, assign locations.
-
On the Cost centers tab, assign cost centers.
TIP: In the Remove assignments pane, you can remove assigned organizations.
To remove an assignment
-
Save the changes.
Related topics
To assign a system role to scope
-
In the Manager, select the Azure Active Directory > Scoped role eligibilities category.
-
Select the role in the result list.
-
Select the Assign system roles task.
-
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.
To remove an assignment
-
Save the changes.
Related topics
To assign a business role to a scope
-
In the Manager, select the Azure Active Directory > Scoped role eligibilities category.
-
Select the role in the result list.
-
Select the Assign business roles task.
-
In the Add assignments pane, select the role class and assign business roles.
TIP: In the Remove assignments pane, you can remove assigned business roles.
To remove an assignment
-
Save the changes.
Related topics