Assigning roles and administrative units

Top delegate tasks are used to create administrative units and assign roles for specific tasks. In this configuration, we will generate an HR and we will assign the role of managing user accounts to manager of the HR department.

Connecting to Azure Active Directory

First of all, we need to connect to our Azure AD with the PowerShell cmdlet Connect-MsolServicewith the [e-mail] user.

Creating an administrative unit

Type New-MsolAdministrativeUnit- DisplayName'HR' -Description'HumanResourcesUsers' to create the HR.

Adding users to an administrative unit

Next, we need to add the users of the HR department to the HR.

1. Type the following commands;

   $au = Get-MsolAdministrativeUnit -searchstring 'HR' 
   $user1 = Get-MsolUser -UserPrincipalName      
       '[e-mail]'
   $user2 = Get-MsolUser -UserPrincipalName
      '[e-mail]'
   

2. Test your variables, for example:

   

3. Type the following commands to...