<p>If you have the need to grant permissions for resetting 2FA for O365 accounts this guide should help.</p>
<p>Until recently, in order to reset 2FA permissions for O365 or Microsoft 365 users, your account had to be a member of the Global admin group. Finally, Microsoft has added the built-in role to grant non-global admins permissions for resetting 2FA for users without giving them additional unnecessary permissions.</p>
<p>Here&#8217;s how to do it:</p>
<p>Navigate to <a href="https://portal.azure.com/" target="_blank" rel="noopener noreferrer">Azure Portal</a> of your tenant. From the home screen navigate to <strong>Azure Active Directory</strong>.</p>
<p>In the left pane click on <strong>Roles and Administrators</strong>. In the right pane click on <strong>Privileged authentication administrator</strong>.</p>
<p><img class="alignnone wp-image-3970 size-full" title="grant permissions for resetting 2FA for Office 365" src="https://www.wincert.net/wp-content/uploads/2020/11/2fa-permissions.png" alt="grant permissions for resetting 2FA for Office 365" width="602" height="102" /></p>
<p>Click on <strong>Add assignments</strong> and add your users.</p>
<p><img class="alignnone wp-image-3971 size-full" title="grant permissions for resetting 2FA for Office 365" src="https://www.wincert.net/wp-content/uploads/2020/11/2fa-permissions-2.png" alt="grant permissions for resetting 2FA for Office 365" width="469" height="40" /></p>
<p>Please have in mind that this group membership grants users permission to view, set, and reset authentication method information for any user (admin or non-admin).</p>
<p><strong>Here&#8217;s the full description:</strong><br />
<em><strong>Users with this role can view the current authentication method information and set or reset non-password credentials for all users, including global administrators. Privileged Authentication Administrators can force users to re-register against existing non-password credentials (e.g. MFA, FIDO) and revoke &#8216;remember MFA on the device&#8217;, prompting for MFA on the next login of all users.</strong></em></p>
<p>Hopefully, this tutorial will help you grant permission for resetting 2FA for O365 accounts. Comments are welcome!</p>

How to grant permissions for resetting 2FA for O365 accounts
