Active Roles 7.2 - Azure Active Directory and Office 365 Administrator Guide

Managing Hybrid AD Users

The Active Roles web interface enables you to perform administrative tasks such as create, read, update, deprovision, undo-deprovison, and delete Azure AD users in Hybrid environment. You can also perform other operations such as add and remove Azure AD users to Groups and assign Office 365 licenses to users. Some of the user operations can be performed using the Management Shell in addition to the web interfcae.The following section guides you through the Active Roles web interface and Management Sell to manage Azure AD users.

• Azure AD user management tasks using Web interface
• Azure AD user management tasks using Management Shell interface
• Office 365 license management for hybrid environment users

Azure AD user management tasks using UI

Azure AD user management tasks using Web interface

Active Roles web interface enables you to perform the following management tasks for Azure AD users:

• Create a new Azure AD user
• View or update the Azure AD user properties
• Modify the Azure AD user Manager
• Disable or re-enable an Azure AD user
• Deprovision or undo deprovision of a Azure AD user
• Add or remove a Azure AD user from a group
• View the Change History and User Activity for an Azure AD user
• Delete an Azure AD user

Create a new Azure AD user

You can use the Active Roles Web Interface to create and enable a new Azure AD user. You can also assign Office 365 licenses to the new user.

To create a new Azure AD user

1. On the Active Roles Web interface Navigation bar, click Directory Management.
2. On the Views tab in the Browse pane, click Active Directory.

   The list of Active Directory domains is displayed.

3. Click the domain in which you need to create a new user.
4. In the list of objects displayed, click the required Container or the Organizational Unit.
5. In the Command pane, click New User.
6. In the New User in <OU name> ->General wizard, enter the user details such as First Name, Last Name, Initials, and User logon name.
7. Click Next.
8. In the Account properties wizard, click Generate to generate a password for the Account, select the required Account options and then click Next.

   Alternatively, you can set the password manually and re-enter in the Confirm Password field to confirm the entered password.

9. In the Create Azure Account wizard, select the option Create Azure Account.

   The Azure AD account details for the new user are generated automatically and populated in the respective fields.

   NOTE: The Temporary Password field is populated with the default password set for the Active Roles user. You can re-set the password for the Azure AD account if required.

10. From the User Principal Name drop-down list,select the AD domain to which you want to associate the Azure AD user.
11. In the Usage Location field, enter the two-letter location code of the location where the product will be used.

    NOTE: The Usage Location field is a mandatory field. The licenses cannot be assigned to the product if the product usage location information is not available. The local rules and regulations for usage of the product and services may vary based on the location.

12. Click Next.

    The Licenses wizard displays the Office 365 licenses, for example the Office 365 Business Essentials and Business Premium licenses, and the number of licenses that are available to assign to the user.

13. Select the check boxes corresponding to the license that needs to be assigned to the user, and click Finish.

The licenses assigned can be viewed on the User Azure Properties->Licenses wizard.

View or update the Azure AD

View or update the Azure AD user properties

For an existing Azure AD user, you can use the Active Roles Web Interface to view or update the properties.

To view or modify the Azure AD user properties

1. On the Active Roles Web interface Navigation bar, click Directory Management.
2. On the Views tab in the Browse pane, click Active Directory.

   The list of Active Directory domains is displayed.

3. Click the specific domain, Container or the Organizational Unit, and then select the check-box corresponding to the specific user for which you want to view or update the properties.
4. In the Command pane, click Azure properties.

   The Azure Properties dialog box for the user is displayed.

5. Use the tabs in the Azure Properties dialog box to view or modify properties of the Azure AD user.
6. To modify the license assignment to the user, click Licenses.

   The Licenses wizard displays the Office 365 licenses available and assigned to the user.

7. Select or remove the selection from the check boxes corresponding to the licenses based on the changes required for the license assignment to the user.
8. After setting all the required properties, click Save.