Permissions or roles required for MTO

Question

Hi Team,

Need to know what permissions or roles required to enable MTO and then be able to configure all configurations under Cross Tenant access settings (including cross tenant synchronization settings). It is a bit confusing to clearly understand the permissions required for it all.

Any assistance would be great.

Regards,
Rakesh Singh

Answer 1

Hello Rakesh Singh,

Thank you for posting your query in Microsoft Q&A.

We cannot specify a single role or permission to configure MTO.

Only an owner tenant can edit the MTO name in an MTO.

The tenant that creates the multitenant organization is known as the owner while other tenants that join the multitenant organization are known as members. Once the global administrator in the owner tenant creates the multitenant organization, they can invite member tenants. A global administrator in each member tenant can then join the multitenant organization.

Summary of Permissions for Multi-Tenant Management

Please refer the below document

https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-configure

Please let us know if you have further questions on this.