Create a Mail-enabled security groups with Azure AD role assignment?

Josh_BI_UK

9/3/23, 8:59 AM

I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks like updating payment information.

Is this even possible? I would rather not create a 365 group as I don't like the additional services created (SharePoint site, Teams etc.)

I have tried to go via Exchange admin centre, however, you can't switch on Role assignment there. I have tried creating the groups within Azure AD, however, you can't create mail-enabled groups there.

The aim is to add the firm's Financial Accountant and Azure Admin to the security group giving both access to any billing-related privilege within Azure and 0365.

With the group's email address I hope to add that to the [Invoice email preference] screen with Azure Cost Management, so they both receive billing alerts and monthly Microsoft invoices.

0 + 0

azure

microsoft-office-365

azure-active-directory

security-groups

exchangeonline

Josh_BI_UK

10/18/22, 6:55 PM

It is the firm's protocol to manage role assignments via groups.

joeqwerty

9/3/23, 8:26 PM

I don't think you can assign Azure roles to a mail-enabled security group. Why not just add the users directly as Billing Admins?

Score:0

Server

Joy Zhang

9/4/23, 2:09 AM

Agree with what joeqwerty has replied above, you cannot assign Billing administrator permission for a mail-enabled security group, since the permission is a Azure AD built-in role. For more details: Azure AD built-in roles

You could assign the permission for users directly.

0 + 0

Josh_BI_UK

10/18/22, 7:03 PM

Hi @JoyZhang , thank you for responding. I have to follow the requirements I have been given to manage the role assignments via groups. I will have to use 365 groups in that case. Thank you for confirming it isn't possible via mail-enabled Security Groups. Could you edit your answer to simply state it isn't possible with your reference to ms doc? I will then vote for your response as the answer. The reference to joeqwerty might confuse other readers.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Create a Mail-enabled security groups with Azure AD role assignment?

TH: สร้างกลุ่มความปลอดภัยที่เปิดใช้งาน Mail ด้วยการกำหนดบทบาท Azure AD หรือไม่

RO: Creați un grup de securitate activat pentru e-mail cu atribuirea rolului Azure AD?

RU: Создать группы безопасности с включенной поддержкой почты с назначением ролей Azure AD?

VI: Tạo nhóm bảo mật hỗ trợ thư với gán vai trò Azure AD?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.