Exercise manage users roles

  • 8 minutes

You need to assign extra permissions to one of your newly created administrators.

In this exercise, you'll create a user account to use in the exercises.

Create an Azure account and add Microsoft Entra ID Premium P2 trial licenses

The tasks in this exercise and the exercises in this learning path require you to already have an Azure subscription that you can use or to sign up for an Azure trial account. If you already have your own Azure subscription, you might skip this task and continue to the next.

  1. In a web browser, go to Azure portal.
  2. Scroll down through the page to learn more about the benefits and free services available.
  3. Select Start free.
  4. Use the wizard to sign up for your Azure trial subscription.
  5. You need to a Microsoft Entra ID P2 license to complete some of the exercises. In the organization you created, search for and then select Microsoft Entra ID.
  6. Select Licenses in the menu.
  7. In the right Quick tasks menu of the Licenses - Overview page, select Get a free trial
  8. Under Getting started with Microsoft Entra ID, select Get a free trial for Microsoft Entra ID Premium.
  9. In the Activate pane, under Microsoft Entra ID PREMIUM P2, select Free trial and then select Activate.
  10. In the navigation menu on the left, select Overview.
  11. Refresh the browser until you see Microsoft Entra ID Premium P2 under the organization name. It might take a couple of minutes.
  12. You might need to sign out and sign back into Microsoft Azure if you encounter any problems with expected features not being available.

Add a new user

Now, let's create a user account.

  1. Sign in to the Microsoft Entra admin center as a Global administrator

  2. In the menu on the left expand the Identity section.

  3. In the left navigation menu, under Users, select All Users, then select +New User.

  4. Create a user using the following information:

    Setting Value
    User principal name AdeleV
    Mail nickname (you might have to uncheck the Derive from user principal name. AdeleV
    Display name Adele Vance
    Password Pass@word1

  5. Select Create. The user is now created and registered to your organization.

Assign a role to a user

Using Microsoft Entra ID, you can designate limited administrators to manage identity tasks in less-privileged roles. Administrators can be assigned for such purposes as adding or changing users, assigning administrative roles, resetting user passwords, managing user licenses, and managing domain names.

  1. In Microsoft Entra ID, All users screen, select Adele Vance.

  2. On the user’s profile page, select Assigned roles. The Assigned roles page appears.

  3. Select Add assignments, select the role to assign to the user (for example, Application administrator), and then select Add.

    Screenshot of the Assigned roles page Adele Vance.

  4. Select + Add Assignment.

    Screenshot of the Assigned roles page - showing the selected role of Application administrator.

The newly assigned Application administrator role appears on the user’s Assigned roles page.

Remove a role assignment

If you need to remove the role assignment from a user, you can also do that from the Assigned roles page.

To remove a role assignment from a user

  1. In Microsoft Entra ID, select Users - All User, and then select the user getting the role assignment removed. For example, Adele Vance.

  2. Select Assigned roles, then select the name of the role your wish to removed - Application Administrator.

  3. On the far right side of the screen, select Remove. Then select Yes option when prompted for confirmation.

    Screenshot of the Remove assignments dialog box with Yes highlighted.

The Application administrator role is removed from the user and it no longer appears on the Adele Vance – Assigned roles page.