Should Help Desk or Junior Admins Be Given Access to Microsoft Graph?
Asked by
TechWiz42
I'm curious if other companies grant their help desk or junior admin staff access to Microsoft Graph. Coming from a smaller company where I had global admin permissions, I've now transitioned to a larger organization that uses more granular permissions. I think having basic access to Microsoft Graph command line tools would help me create some automations and streamline workflows. How do I go about requesting this access to allow the help desk to query the Graph API as well?
Answers
If there are specific scripts they need to run, consider building a service principal with read permissions in Graph. You could also give them global reader access if that suits your needs.
Reply to this answer
Just a heads-up, I've always subscribed to the philosophy that no one gets access to anything that isn't absolutely necessary for their job. So think about what they specifically need to do.
Reply to this answer
Honestly, I've never met a help desk that even knows how to use Graph. What do you think they'd actually accomplish with that kind of access?
Reply to this answer
It’s pretty straightforward! Just assign them the necessary RBAC roles they need to perform their tasks, and they'll get access to the Graph without any extra configs needed. There’s no separate permission just for Graph access.
TechWiz42: Thanks for the tip! RBAC looks like the way to go.
Reply to this answer
Add your answer
Answers are reviewed before publication.
TechWiz42: Haha, I get your point! But maybe they could help out with basic queries?