Work with Microsoft 365 user accounts

---

Content: 

Create a new user

1. Click the Microsoft Office 365 administrative views then click Users web query

2. On the Actions menu, click New User

3. Enter the new user’s First and Last Name and verify the automatically generated values on the form.

   Optionally, you can complete Job Title, Department, and Office

4. Verify or select the proper location from the Location menu

   This value is required if the user will be assigned an Office 365 License

5. To set a Manager, locate and click the Change button at the right of the Manager attribute

6. To assign an Office 365 License, verify the Assign License option is chosen

7. Click the License Option link to see the Office 365 License dialog

   Note: If the License Option link is not displayed on the dialog box proceed to step 9

8. Choose the desired license and option for the user then click OK

9. Click Next

10. To let the system create a complex password set the Auto-generated password option

    To enter a custom password click the Type password option and enter a password

11. Check the desired options for how the account settings will be applied to the new account

12. Click Create

 

After a few moments, a green or red indication balloon will appear at the top right of the portal. Clicking the ACTIVITIES icon will display the results of the account creation.

 

Reset a password

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search or press Enter

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Reset Password

5. Under Password, choose to use the Auto generated password or click Type Password to enter a new password.

6. Under Email notification, choose Don't send the password or click Send to, to enter a new email address of someone who will receive a copy of the user’s new password by e-mail.

7. Check User must change password at next logon to force the user to change the password

8. Check Unlock account if the account is in the locked-out state

9. Enter a comment that will be recorded in the operational history log

10. Click Reset Password

11. After the confirmation is displayed, click Close

 

Suspend a user

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Suspend

5. Enter a comment that will be recorded in the operational history log

6. Click Suspend

 

Undo Suspend

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Undo Suspend

5. Enter a comment that will be recorded in the operational history log

6. Click Undo Suspend

 

Delete a user 

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Delete

5. Enter a comment that will be recorded in the operational history log

6. Click Delete

 

View or change user properties

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Properties

5. You can view or modify user properties on these tabs:
   1. Account
   2. Settings
   3. Organization
   4. Contact 
   5. Member Of 
   6. Info
      1. To generate a Last Azure AD Logon, you need a successful sign-in. The value of the Last Azure AD Logon can be blank if:
         1. The last successful sign-in of a user took place before April 2020.
         2. The affected user account was never used for a successful sign-in.
      2. Creation type Indicates whether the user account was created as a regular school or work account (null), an external account (Invitation), a local account for an Azure Active Directory B2C tenant (LocalAccount) or self-service sign-up using email verification (EmailVerified).
      3. All dates are displayed in UTC format.

 

Compare Membership

1. Click the Microsoft Office 365  administrative views then click Users web query 

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Compare Membership

5. Click Change to select Template account  

6. If Add and Remove buttons are available for you, you can modify the user's membership:

   1. To copy groups from a template user account to target you should select the groups that only the template user has and click Add

   2. To remove groups you should select the groups that a target user has but a template user doesn't have and click Remove 

 

Prevent Sign-in for a user (block credentials)

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Prevent Sign-in

 

Allow sign-in for a user (unblock credentials)

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Allow Sign-in

 

Set or update a Job Title, Department, or Office for a user

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Properties

5. Click the Organization tab at the top

6. Type a Job Title or Department for the user

7. Click Update

 

Set or update a Manager for a user

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Properties

5. Click the Organization tab at the top

6. Click Change to the right of the Manager field

7. Enter the manager’s name in the search field and click Search Objects

8. Click the checkmark to the left of the manager’s name then click OK

9. Click Update

 

Add a user to a group

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Properties

5. Click the Member of tab at the top

6. Click Add

7. Enter the name of the group in the search field and click Search Objects

8. Click the checkmark to the left of the group name(s) from which the user is to be added then click Add

9. Click Ok

10. Click Update

 

Remove a user from a group

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Properties

5. Click the Member of tab at the top

6. Click the checkmark to the left of the group name(s) from which the user is to be removed then click Remove

7. Click Update

 

Assign an Office 365 License to a User

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Office 365 License

 

Enable/Disable Multi-Factor-Authentication for a User

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click MFA Settings

5. From the Multi-factor Authentication drop-down, choose the desired setting

6. Click OK

 

Authentication Methods

1. Click the Active Directory administrative unit

2. Click AD Users query

3. Enter the name of the user in the search field and click Search Objects

4. Click the checkmark to the left of the user’s name

5. On the Actions menu, click Authentication Methods

6. Add authentication methods for the selected user:
   1. Email
   2. Mobile phone
   3. Office phone
   4. Alternate mobile
   5. Temporary Access Pass
7. Click Update

 

Teams Policies 

1. Teams Policies web action is available in these Admin Units and queries:
   1. Active Directory > AD Users 
   2. My Organization > My AD Users 
   3. Microsoft Office 365 > Users 

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Teams Policies 

5. Select Teams Policies to assign to this user

6. Click Update

 

Convert to Guest

1. Click the Microsoft Office 365 administrative views then click Users web query

2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Convert to Guest

5. Enter a comment that will be recorded in the operational history log

6. Click Convert to Guest

 

OneDrive Properties

1. Click the Microsoft Office 365 administrative unit

2. Click Users web query

3. Enter the name of the user in the search field and click Search Objects

4. Click the checkmark to the left of the user’s name

5. On the Actions menu, click OneDrive Properties

6. Specify secondary site collection admins

7. Specify settings: 

   1. If people outside the organization can access user OneDrive
   2. Storage quota in GB

8. Click Update

 

AAD Administrative Units

1. AAD Administrative Units web action can be used in these web queries:
   1. Users 
   2. Groups
   3. Teams
   4. Guest users
2. Enter the name of the object in the search field and click Search Objects

3. Click the checkmark to the left of the object’s name

4. On the Actions menu, click AAD Administrative Units

5. If Parent container Azure AD Administrative Unit is not set, you can click Change and select the parent container.
   Note: Only Azure AD Administrative Units that are marked Treat as Container can be selected as parent containers.
6. If the selected object is already added to multiple container Azure AD Administrative Units you will see the message that you need to select a single Administrative Unit as a parent. 
7. Click Add to add the selected object to Other Azure AD Administrative Units that are not set as containers.

 

Move

1. Enter the name of the object in the search field and click Search Objects

2. Click the checkmark to the left of the object’s name

3. On the Actions menu, click AAD Administrative Units

4. Click Change and select the parent container.
   Note: Only Azure AD Administrative Units that are marked Treat as Container can be selected as parent containers.
5. If the selected object is already added to multiple container Azure AD Administrative Units you will see the message that you need to select a single Administrative Unit as a parent. 
6. Select the parent container
7. Click Update to move the selected object to Parent Container Azure AD Administrative Unit

 

Authentication Policy

1. Enter the name of the object in the search field and click Search Objects

2. Click the checkmark to the left of the object’s name

3. On the Actions menu, click Authentication Policy

4. Select Exchange Online authentication policy to assign
5. Click OK

 

Teams Voice Settings

1. Teams Voice Settings web action is available in these Admin Units and queries:
   1. Active Directory > AD Users 
   2. My Organization > My AD Users 
   3. Microsoft Office 365 > Users 
2. Enter the name of the user in the search field and click Search Objects

3. Click the checkmark to the left of the user’s name

4. On the Actions menu, click Teams Voice Settings

5. Update Teams policies if needed
6. To update the user a phone number select Update Number
7. Specify the type of number: Calling Plan, Direct Routing, or Operator Connect
8. For the Calling Plan specify the Phone number and Emergency Location, and select them from the list
9. There are several options for Direct Routing: 
   1. Enter manually - specify the number manually: copy/paste it from an outside source
   2. CSV Mapping - select this option to assign the number that will be selected from the rule configured by the administrator
   3. Clear current number - use this option to delete the number
10. Click Update

 

User Devices

1. Enter the name of the object in the search field and click Search Objects

2. Click the checkmark to the left of the object’s name

3. On the Actions menu, click User Devices

4. You can see user's owned devices and registered devices
5. You can look through the details of the selected device, Bitlocker keys, enable or disable the device or delete the device. 

 

 

---

 

Change History 

Version	Notes
10.2.0	User Deices web action has been added.
9.3.0	The Operator Connect phone number type has been added to the Teams Voice Settings web action. The CSV mapping option has been added.
8.4.0	Teams Voice Settings weeb action has been added.
8.2.0	Authentication Policy web action has been added. Last logon (Azure AD) information has been added to the Info tab.
8.1.0	Move web action has been added.
8.0.0	AAD Administrative Units web action has been added.
7.3.0	OneDrive Properties web action has been added.
7.2.0	Convert to Guest web action has been added.
7.1.0	Teams Policies web action has been added.