Help Desk Delegation

With M365 Security Plus, you can create your own custom roles with selected tasks to delegate, while in Microsoft 365 you are restricted to the default roles. You can select any combination of security tasks to create your own role.

• Create custom help desk roles
• Delegate a help desk role to technician
  • Create a new technician to delegate
  • Delegate roles to an existing technician
  • Delegate domains to an existing technician
  • Delegate virtual tenants to an existing technician

Steps to create a custom help desk role

• Login to M365 Security Plus.
• Go to Delegation tab.
• Select Help Desk Delegation → Help Desk Roles in the left pane.
• Click Create New Role found in the right top corner.
• Enter the Role Name and Description in the respective text boxes.
• Select the tasks you want to delegate. You can select any number of audit reports, and other security features.

Delegate a help desk role to technician

A role can be assigned to either an already existing help desk technician or you can create a new technician and then assign the relevant role to the technician.

Steps to create a new technician to delegate

• Go to Delegation tab.
• Select Help Desk Delegation → Help Desk Technician in the left pane
• Click Add New Technician found in the top right corner.
• Select the Microsoft 365 tenant and the users to whom you want to delegate.
• In the Help Desk Roles drop-down, select the desired roles. (You can select any number of roles.)
• In Delegate Microsoft 365 Tenants drop-down, select the Microsoft 365 tenant on which the user can use the rights delegated. For example, user a123 can reset passwords of users in the tenant selected here.
• Select Impersonate as Admin, if the admin credentials should be used to generate reports and perform tasks.
• Click Add.

Note

• Only Microsoft 365 users can be added as technicians.
• Super Admin, Incident Coordinator, Security Administrator, and Security Analyst are the default technicians provided in the product. You can modify and delete those technicians. Once deleted, these technicians can't be restored. Super Admin cannot be deleted.
• While configuring MFA enabled / Federated accounts as technicians, make sure that Rest API based authentication is enabled. Click here to know how.
• If you have any queries or need more clarification, please contact m365securityplus-support@manageengine.com.

To delegate roles to an existing technician

• Go to Delegation tab.
• Select Help Desk Delegation → Help Desk Technician in the left pane.
• Click the edit icon under the Actions column near the technician to whom you want to add a new role.
• In the Help Desk Roles column, use the drop-down to add the newly created role.
• Enable Overwrite existing delegation settings, if you want to remove all the roles assigned previously and add the current selection alone. If disabled, the new role will be added along with the already existing roles.
• Click Save Changes.

Steps to delegate domains to an existing technician(Disabled virtual tenant delegation)

• Go to Delegation tab.
• Select Help Desk Delegation → Help Desk Technician in the left pane.
• Select Edit Technician in the Actions column corresponding to the technician you want to edit.
• In the Edit Technician page, select + in the Domain Name column, and select the domains to which the technician's roles must apply.
• Click Add.
• Click Save Changes.

Steps to delegate domains to an existing technician(Enabled virtual tenant delegation)

1. Create a virtual tenant with the domains to be delegated.
   • Go to the Settings tab.
   • Navigate to Configuration → Other Configuration → Virtual Tenants
   • Click on Create Virtual Tenant.
   • Provide a name for the virtual tenant to be created, and choose the Microsoft 365 tenant in which it must be created.
   • In the Filter by section, select 'Domains' and 'In' from the available drop-down lists respectively.
   • In the text box select the domains using the + option.
   • Click Save
2. Delegate the virtual tenant created above to the technicians
   • Go to Delegation tab.
   • Select Help Desk Delegation → Help Desk Technician in the left pane.
   • Select Edit Technician in the Actions column corresponding to the technician you want to edit.
   • In the Delegates to page, select the Virtual Tenants you had created from the Virtual tenant drop-down.
   • Click Save Changes.