GLEN COVE, NEW YORK
Premier Microsoft Office 365 cloud services consultant, the Web and I, is releasing our latest security recommendations for your Microsoft Office 365, Microsoft Dynamics CRM, and related products soon to be released. Soon to be released will be Microsoft Project Server, Microsoft Dynamics GP Microsoft Dynamics NAV.
From our experiences in professional installations and the security considerations we have had as well as our experiences with the new Office 365 to be released to the public on February 27 (or here from us at the Web and I today!).
There are several types of administrators for Office 365 and related products, and it is clear to see their intended roles. Whoever manages the credit or debit card associated with payment, probably the owner or the accountant will be assigned the Billing Administrator position. The implementation I.T. consultant will have the Global Administrator role The Global Administrator can make changes to the Exchange, Lync, and SharePoint servers.. The Service Administrator is someone who has the permission to go and check the status of the cloud service health on a dashboard provided by Microsoft Office 365. The User Management Administrator can add and remove users and re-set passwords. The company HR person or IT person who works with the HR department are the natural choices for User Management Administrator. Since User Management Administrators are not always from a technical background it is vital to explain to them the importance of not duplicating users and stressing the permanence of deleting users.
|Permission||Billing administrator||Global administrator||Password administrator||Service administrator||User management administrator|
|View company and user information||Yes||Yes||Yes||Yes||Yes|
|Manage support tickets||Yes||Yes||Yes||Yes||Yes|
|Reset user passwords||No||Yes||Yes||No||Yes; with limitations. He or she cannot reset passwords for billing, global, and service administrators.|
|Perform billing and purchasing operations||Yes||Yes||No||No||No|
|Create and manage user views||No||Yes||No||No||Yes|
|Create, edit, and delete users and groups, and manage user licenses||No||Yes||No||No||Yes; with limitations. He or she cannot delete a global administrator or create other administrators.|
|Manage company information||No||Yes||No||No||No|
|Delegate administrative roles to others||No||Yes||No||No||No|
|Use directory synchronization||No||Yes||No||No||No|