{"id":250,"date":"2025-04-02T12:37:14","date_gmt":"2025-04-02T12:37:14","guid":{"rendered":"https:\/\/bestosttopst.org\/blogs\/?p=250"},"modified":"2025-04-03T05:02:58","modified_gmt":"2025-04-03T05:02:58","slug":"assign-roles-in-microsoft-office-365","status":"publish","type":"post","link":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/","title":{"rendered":"Microsoft 365 Guide to Assign Roles in Office 365"},"content":{"rendered":"<p>In Microsoft 365, we must decide whether the right task is assigned to every user or not. If the admin gives full permission to everyone, sensitive information may be put at risk. However, if the admin gives limited access, users will not complete their tasks due to insufficient permission. The solution lies in beautiful concepts called roles. Based on user work, roles are assigned to perform the tasks in the organization. Below, we have discussed how to assign roles in Office 365.<\/p>\n<h2><strong>What are the Roles in Microsoft 365?<\/strong><\/h2>\n<p>A role is a group of permissions that defines what tasks a user can perform within the organization. There are predefined roles such as Global Administrator, Compliance Administrator, and Helpdesk Administrator, each comes with unique permissions. Also, Roles ensure that users have the necessary permission to complete their tasks while maintaining security. \u00a0Assign roles in Office 365 to provide clarity, keep work organized, and improve overall efficiency.<\/p>\n<h3><strong>Commonly used Admin Roles in Microsoft 365?<\/strong><\/h3>\n<p>To get the work done smoothly and reliably, Microsoft offers a variety of roles that help businesses assign different tasks to different team members. Below, we will learn about some of the important roles of a Microsoft 365 administrator.<\/p>\n<p><strong>Global Administration:<\/strong> When a person signs up for a Microsoft 365 account, he becomes a Globin admin. This means he has the power to manage everything in the organization, like adding new users, managing licenses, security settings, etc.<\/p>\n<p><strong>Billing Administrator:<\/strong> The billing administrator manages roles that deal with the financial aspects of a Microsoft 365 subscription, such as purchasing new services, renewing subscriptions, and tracking payments.<\/p>\n<p><strong>Exchange Administrator:<\/strong> It can recover deleted items in users\u2019 mailboxes and manages Microsoft groups and filters malware for the organization through email anti-spam protection.<\/p>\n<p><strong>SharePoint Administrator:<\/strong> Once assigned this role, the user has the following responsibilities: creating sites, deleting sites, managing sharing settings at the organization level, adding and removing site administrators, and managing site storage limits.<\/p>\n<p>Above are the common roles that are used in the organization. To learn more about these roles, you can visit the Microsoft website.<\/p>\n<h2><strong>How do you assign roles in Office 365?<\/strong><\/h2>\n<p>Now we learn three methods to assign roles to the users.<\/p>\n<ol>\n<li>Assign roles through the Microsoft 365 admin center.<\/li>\n<li>Set roles using the Microsoft Graph PowerShell.<\/li>\n<li>Use Microsoft Entra PIM to assign roles.<\/li>\n<\/ol>\n<h3><strong>Assign roles through the Microsoft 365 Admin Center<\/strong><\/h3>\n<h4><strong>(a)Select a role and then assign it to the user.<\/strong><\/h4>\n<ul>\n<li>Sign in to the Microsoft account using this link: <a href=\"https:\/\/login.microsoftonline.com\/\">https:\/\/login.microsoftonline.com\/<\/a><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-253\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-log-in-Page-1.png\" alt=\"Microsoft log in page\" width=\"442\" height=\"338\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-log-in-Page-1.png 442w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-log-in-Page-1-300x229.png 300w\" sizes=\"(max-width: 442px) 100vw, 442px\" \/><\/p>\n<ul>\n<li>Click on the <strong>admin<\/strong> button.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-254\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Button-1.png\" alt=\"Admin Button\" width=\"118\" height=\"394\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Button-1.png 118w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Button-1-90x300.png 90w\" sizes=\"(max-width: 118px) 100vw, 118px\" \/><\/p>\n<ul>\n<li>In the drop-down menu, select the <strong>Roles<\/strong> section and then select <strong>Role Assignments<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-255\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/role-assignment.png\" alt=\"Role Assignment\" width=\"227\" height=\"564\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/role-assignment.png 227w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/role-assignment-121x300.png 121w\" sizes=\"(max-width: 227px) 100vw, 227px\" \/><\/p>\n<ul>\n<li>Select the <strong>Microsoft Entra ID<\/strong> to view the admin roles available for your organization.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-257\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-Entra-ID.png\" alt=\"Admin roles in microsoft assignments\" width=\"817\" height=\"316\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-Entra-ID.png 817w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-Entra-ID-300x116.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Microsoft-Entra-ID-768x297.png 768w\" sizes=\"(max-width: 817px) 100vw, 817px\" \/><\/p>\n<ul>\n<li>Click on any admin role that you want to assign to the users. A new side window will appear. Here, click on the <strong>assigned<\/strong> tab and then <strong>add users<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-258\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Role-assigned-add-users.png\" alt=\"Role assigned and add users\" width=\"1146\" height=\"570\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Role-assigned-add-users.png 1146w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Role-assigned-add-users-300x149.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Role-assigned-add-users-1024x509.png 1024w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Role-assigned-add-users-768x382.png 768w\" sizes=\"(max-width: 1146px) 100vw, 1146px\" \/><\/p>\n<ul>\n<li>Enter the username and select the user from the suggestion list. You can add multiple users for the roles.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-259\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-user-Enter-name.png\" alt=\"Add User\" width=\"474\" height=\"294\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-user-Enter-name.png 474w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-user-Enter-name-300x186.png 300w\" sizes=\"(max-width: 474px) 100vw, 474px\" \/><\/p>\n<ul>\n<li>Click on the <strong>Add<\/strong> button to add the user that you have selected.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-260\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Addin-the-user-by-first-method.png\" alt=\"Adding user by first method\" width=\"456\" height=\"341\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Addin-the-user-by-first-method.png 456w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Addin-the-user-by-first-method-300x224.png 300w\" sizes=\"(max-width: 456px) 100vw, 456px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h4><strong>(b)Select users and assign a role to them.<\/strong><\/h4>\n<ul>\n<li>To assign multiple roles to a single user, go to the admin center and click on the <strong>users<\/strong>, then <strong>active users<\/strong> from the left sidebar. All users will be displayed. Here, click on any user whom you want to assign the roles and then click on the <strong>manage roles<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-262\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-Active-users-pradeep-test-manage-roles.png\" alt=\"\" width=\"1337\" height=\"599\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-Active-users-pradeep-test-manage-roles.png 1337w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-Active-users-pradeep-test-manage-roles-300x134.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-Active-users-pradeep-test-manage-roles-1024x459.png 1024w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-Active-users-pradeep-test-manage-roles-768x344.png 768w\" sizes=\"(max-width: 1337px) 100vw, 1337px\" \/><\/p>\n<ul>\n<li>Choose <strong>Admin Center access <\/strong>and select the required roles according to the work, then hit <strong>Save Changes<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-263\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Center-and-show-all-categories.png\" alt=\"Admin access\" width=\"724\" height=\"545\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Center-and-show-all-categories.png 724w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Admin-Center-and-show-all-categories-300x226.png 300w\" sizes=\"(max-width: 724px) 100vw, 724px\" \/><\/p>\n<h3><strong>Assign Roles to the Users using Microsoft Graph PowerShell<\/strong><\/h3>\n<p>You can assign roles to users using PowerShell. It is a faster and more efficient way to manage permission. Instead of assigning permissions one by one, it enables you to manage multiple users at once.<\/p>\n<p>To install the Microsoft Graph PowerShell, run the following command in the Windows PowerShell.<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">Install-Module Microsoft.Graph -Scope AllUsers -Repository PSGallery -Force<\/pre>\n<p>Ensure you have run the above command. After that, enter the below command.<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">$UPN=&quot;&lt;UserPrincipalName&gt;&quot;\r\n\r\n$RoleName=&quot;&lt;AdminRoleName&gt;&quot;\r\n\r\nConnect-MgGraph -Scopes &quot;RoleManagement.ReadWrite.Directory&quot;\r\n\r\n$RoleId = (Get-MgRoleManagementDirectoryRoleDefinition -Filter &quot;DisplayName eq '$RoleName'&quot;).Id\r\n\r\n$UserId = (Get-MgUser -Filter &quot;UserPrincipalName eq '$UPN'&quot;).Id\r\n\r\nNew-MgRoleManagementDirectoryRoleAssignment -DirectoryScopeId '\/' -RoleDefinitionId $RoleId -PrincipalId $UserId<\/pre>\n<p>Change the <em>&lt;UserPrincipalName&gt;<\/em>\u00a0and\u00a0<em>&lt;AdminRoleName&gt;<\/em>\u00a0with the UPN of the Microsoft 365 user and role name.<\/p>\n<p>This PowerShell script first connects to the Graph API with the required access rights. It then employs the \u201cNew-MgRoleManagementDirectoryRoleAssignment\u201d cmdlet to grant a designated role to a user. Moreover, it supports assigning both predefined and custom roles as per the requirements.<\/p>\n<h3><strong>Assign Role using PIM in Microsoft Entra Admin Center<\/strong><\/h3>\n<h4><strong>(a) Select a role and then assign it to the user<\/strong><\/h4>\n<p>Microsoft Entra Admin Privileged Identity Management (PIM) helps give special permission to the users for a particular time period.<\/p>\n<ul>\n<li>After signing in to this page\u00a0 <a href=\"https:\/\/login.microsoftonline.com\/\">https:\/\/login.microsoftonline.com\/,<\/a> click on the admin tab located on the left side of the drop-down menu and then click on <strong>identity <\/strong>from the options.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-264\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity.png\" alt=\"Identity\" width=\"225\" height=\"608\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity.png 225w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-111x300.png 111w\" sizes=\"(max-width: 225px) 100vw, 225px\" \/><\/p>\n<ul>\n<li>The Microsoft Entra admin center page will open, and on the left side, press the <strong>identity<\/strong> tab. A drop-down will appear and select the <strong>Roles &amp; Admins<\/strong>, then again select <strong>Roles and Admins<\/strong>. Click on the role name that you want to assign to the users.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-265\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-roles-and-administration-attack-simulation-administration-1.png\" alt=\" identity-roles-and-administration-attack-simulation-administration\" width=\"1179\" height=\"609\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-roles-and-administration-attack-simulation-administration-1.png 1179w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-roles-and-administration-attack-simulation-administration-1-300x155.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-roles-and-administration-attack-simulation-administration-1-1024x529.png 1024w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/identity-roles-and-administration-attack-simulation-administration-1-768x397.png 768w\" sizes=\"(max-width: 1179px) 100vw, 1179px\" \/><\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>Select the <strong>Add Assignments.<\/strong><\/li>\n<\/ul>\n<p><strong>.<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-266\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-Assignments.png\" alt=\"Add Assignment\" width=\"804\" height=\"236\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-Assignments.png 804w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-Assignments-300x88.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-Assignments-768x225.png 768w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/> <\/strong><\/p>\n<ul>\n<li>In this, click on <strong>No Member Selected<\/strong>, then a new window pops up on the left side; select the member and hit on the <strong>select.<\/strong><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-267\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/No-member-selected-somit-select.png\" alt=\"No-member-selected-somit-select\" width=\"831\" height=\"576\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/No-member-selected-somit-select.png 831w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/No-member-selected-somit-select-300x208.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/No-member-selected-somit-select-768x532.png 768w\" sizes=\"(max-width: 831px) 100vw, 831px\" \/><\/p>\n<ul>\n<li>Once a member is selected, press the <strong>Next<\/strong> button.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-268\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Next.png\" alt=\"Next\" width=\"501\" height=\"573\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Next.png 501w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Next-262x300.png 262w\" sizes=\"(max-width: 501px) 100vw, 501px\" \/><\/p>\n<ul>\n<li>A new page will appear; select <strong>Active<\/strong> on checkbox and tick the <strong>Permanent Assigned\u00a0<\/strong>Box or uncheck it if you want to add start and end time. At last, hit on the <strong>Assign<\/strong> tab.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-269\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-Assign.png\" alt=\"Active Assign\" width=\"409\" height=\"561\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-Assign.png 409w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-Assign-219x300.png 219w\" sizes=\"(max-width: 409px) 100vw, 409px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h4><strong>(b)Select Users and then assign role to them<\/strong><\/h4>\n<ul>\n<li>Click on the <strong>Users<\/strong> and then select <strong>All Users.<\/strong><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-270\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-and-All-Users.png\" alt=\"Users and All Users\" width=\"196\" height=\"514\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-and-All-Users.png 196w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Users-and-All-Users-114x300.png 114w\" sizes=\"(max-width: 196px) 100vw, 196px\" \/><\/p>\n<ul>\n<li>Select a User whom you want to assign a role.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-271\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-a-user.png\" alt=\"Select a user\" width=\"1121\" height=\"551\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-a-user.png 1121w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-a-user-300x147.png 300w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-a-user-1024x503.png 1024w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-a-user-768x377.png 768w\" sizes=\"(max-width: 1121px) 100vw, 1121px\" \/><\/p>\n<ul>\n<li>In the user, click on <strong>Assigned roles<\/strong> on the left side of the screen and then click on the <strong>Add Assignment<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-272\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-assignments-2.png\" alt=\"\" width=\"727\" height=\"248\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-assignments-2.png 727w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Add-assignments-2-300x102.png 300w\" sizes=\"(max-width: 727px) 100vw, 727px\" \/><\/p>\n<ul>\n<li>Click on the <strong>select role<\/strong> and choose the role you want to assign and then click on the <strong>next<\/strong> button.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-273\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-role-next.png\" alt=\"Select-role-next\" width=\"420\" height=\"554\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-role-next.png 420w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Select-role-next-227x300.png 227w\" sizes=\"(max-width: 420px) 100vw, 420px\" \/><\/p>\n<ul>\n<li>Choose the active option and tick mark the permanent option and then hit on assign button.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-282\" src=\"http:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-pemanent-assign-2.png\" alt=\"Active-pemanent-assign\" width=\"411\" height=\"554\" srcset=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-pemanent-assign-2.png 411w, https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/Active-pemanent-assign-2-223x300.png 223w\" sizes=\"(max-width: 411px) 100vw, 411px\" \/><\/p>\n<h3><strong>Best Practices for Managing Roles in Microsoft 365<\/strong><\/h3>\n<p>To ensure your organization achieves maximum efficiency and security, consider these practices recommended by experts when you assign roles in Office 365:<\/p>\n<ul>\n<li><strong>Regular Audits<\/strong>: Maintain security and remove unnecessary permissions from users.<\/li>\n<li><strong>Least Privilege Principle<\/strong>: As the name suggests, assign only the permissions that the user needs to do their job, nothing more.<\/li>\n<li><strong>Use PIM for Sensitive Roles<\/strong>: Leverage privileged identity management (PIM) for high-powered roles, such as Global Admin, to limit permanent access.<\/li>\n<li><strong>Document Role Assignments<\/strong>: Keep records of users, like which role is assigned to which user.<\/li>\n<\/ul>\n<h4><strong>Conclusion:<\/strong><\/h4>\n<p>Assigning roles in Office 365 is a simple and powerful way to use your organization&#8217;s resources. In the above article, we have explained three ways (Admin Center, PowerShell, or PIM) to assign roles in Office 365. Following the best practices like regular audits, the least privilege principle, etc., will help you get work done effectively while keeping your organization&#8217;s information resources secure.<\/p>\n<p><strong>Read More: <a title=\"Permalink to: Complete Guide for Adding a Domain in Microsoft 365\" href=\"https:\/\/bestosttopst.org\/blogs\/adding-a-domain-in-microsoft-365\/\">Complete Guide for Adding a Domain in Microsoft 365<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Microsoft 365, we must decide whether the right task is assigned to every user or not. If the admin gives full permission to everyone, sensitive information may be put at risk. However, if the admin gives limited access, users will not complete their tasks due to insufficient permission. The solution lies in beautiful concepts [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":275,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-250","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-office-365"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft 365 Guide to Assign Roles in Office 365 -<\/title>\n<meta name=\"description\" content=\"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft 365 Guide to Assign Roles in Office 365 -\" \/>\n<meta property=\"og:description\" content=\"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365\" \/>\n<meta property=\"og:url\" content=\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-02T12:37:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-03T05:02:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/\",\"url\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/\",\"name\":\"Microsoft 365 Guide to Assign Roles in Office 365 -\",\"isPartOf\":{\"@id\":\"http:\/\/bestosttopst.org\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png\",\"datePublished\":\"2025-04-02T12:37:14+00:00\",\"dateModified\":\"2025-04-03T05:02:58+00:00\",\"author\":{\"@id\":\"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/ff23c9c3fa82da31deda5d9cbc17c98d\"},\"description\":\"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365\",\"breadcrumb\":{\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage\",\"url\":\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png\",\"contentUrl\":\"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png\",\"width\":720,\"height\":405},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/bestosttopst.org\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft 365 Guide to Assign Roles in Office 365\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/bestosttopst.org\/blogs\/#website\",\"url\":\"http:\/\/bestosttopst.org\/blogs\/\",\"name\":\"\",\"description\":\"helpful articles for resolve users issues\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/bestosttopst.org\/blogs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/ff23c9c3fa82da31deda5d9cbc17c98d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d44916acc045e67956b4441bb81becd1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d44916acc045e67956b4441bb81becd1?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"description\":\"Best OST to PST is a website that helps fix problems with OST files, like corruption or inaccessibility. The site also provides helpful blogs, tips, and solutions for all users, whether you\u2019re a beginner or an expert.\",\"sameAs\":[\"http:\/\/bestosttopst.org\/blogs\"],\"url\":\"https:\/\/bestosttopst.org\/blogs\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft 365 Guide to Assign Roles in Office 365 -","description":"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft 365 Guide to Assign Roles in Office 365 -","og_description":"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365","og_url":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/","article_published_time":"2025-04-02T12:37:14+00:00","article_modified_time":"2025-04-03T05:02:58+00:00","og_image":[{"width":720,"height":405,"url":"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/","url":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/","name":"Microsoft 365 Guide to Assign Roles in Office 365 -","isPartOf":{"@id":"http:\/\/bestosttopst.org\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage"},"image":{"@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage"},"thumbnailUrl":"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png","datePublished":"2025-04-02T12:37:14+00:00","dateModified":"2025-04-03T05:02:58+00:00","author":{"@id":"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/ff23c9c3fa82da31deda5d9cbc17c98d"},"description":"Guide to Assign Roles in Office 365 using Admin Center, PowerShell, and PIM. Read article to understand how to assign roles in Office 365","breadcrumb":{"@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#primaryimage","url":"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png","contentUrl":"https:\/\/bestosttopst.org\/blogs\/wp-content\/uploads\/2025\/04\/How-to-assign-role-in-microsoft-office-365.png","width":720,"height":405},{"@type":"BreadcrumbList","@id":"https:\/\/bestosttopst.org\/blogs\/assign-roles-in-microsoft-office-365\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/bestosttopst.org\/blogs\/"},{"@type":"ListItem","position":2,"name":"Microsoft 365 Guide to Assign Roles in Office 365"}]},{"@type":"WebSite","@id":"http:\/\/bestosttopst.org\/blogs\/#website","url":"http:\/\/bestosttopst.org\/blogs\/","name":"","description":"helpful articles for resolve users issues","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/bestosttopst.org\/blogs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/ff23c9c3fa82da31deda5d9cbc17c98d","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/bestosttopst.org\/blogs\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d44916acc045e67956b4441bb81becd1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d44916acc045e67956b4441bb81becd1?s=96&d=mm&r=g","caption":"admin"},"description":"Best OST to PST is a website that helps fix problems with OST files, like corruption or inaccessibility. The site also provides helpful blogs, tips, and solutions for all users, whether you\u2019re a beginner or an expert.","sameAs":["http:\/\/bestosttopst.org\/blogs"],"url":"https:\/\/bestosttopst.org\/blogs\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/posts\/250"}],"collection":[{"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/comments?post=250"}],"version-history":[{"count":8,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/posts\/250\/revisions"}],"predecessor-version":[{"id":284,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/posts\/250\/revisions\/284"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/media\/275"}],"wp:attachment":[{"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/media?parent=250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/categories?post=250"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bestosttopst.org\/blogs\/wp-json\/wp\/v2\/tags?post=250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}