I’ve had a few questions recently about how to manage a customer’s account on Office 365 without having to create a user account in their domain for that purpose.

To do this you must first be a Microsoft Online Services Cloud Partner.  Set that up through you Microsoft partner account. (Instructions for doing that are long and complicated and are beyond the scope of this posting).

When logged into your partner account you will have a Partner option:

image

Click Partner

image

If you are not already a delegated admin for your customer, click the link at the bottom of the screen to generate an offer of delegated administration.  This will create a URL that your customer will click that embeds your Microsoft Partner ID, and will allow them to authorize you to act as a delegated admin on their behalf.

Once that’s done, click the "Look up user or domain” under the Find and assist option:

image

Enter your customer’s domain name and click next.

if the domain is found, and you are listed as a delegated admin, you’ll see this screen:

image

 

Click the Administer on behalf of link, and you’ll be logged into their version of the portal as if you were an administrator of their domain.

You can then run any command you can normally through the UI including creation of mailboxes, etc.

Unfortunately, you still cannot run Exchange PowerShell commands, but you can run other MSOL PowerShell commands using the –TenantID parameter.  See this Blog Entry for more details: https://darrenmyher.wordpress.com/2012/11/21/office-365-how-to-run-powershell-commands-on-behalf-of-your-customers/

If you do need to run Exchange related PowerShell command, then you’ll need to create an administrator account for yourself inside your customer’s domain:

image

Click Users and groups

image

Create an account for yourself.  What you call it doesn’t matter.

image

Configure the account as a global administrator.

Advertisements