This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 99%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMH%3C/text%3E%3C/svg%3E)
In Active Directory Users and Computers (ADUC) - Version: 10.0.22621.755,
I created normal account in ADUC. Then it showed up in "Microsoft 365 Admin Center" side.
Our Users do not have ADMIN Rights. I do not want to use my Global Admin to install applications on User Systems. I see in "Microsoft 365 Admin Center", I now see the normal Account I created in ADUC and then applied the "Helpdesk Administrator and Application Administrator" "Roles", to this account.
My though is, now this account should have the required rights to Add\Remove applications from a system, but it does not. Thinking it is something to do on the ADUC side and not the "Microsoft 365 Admin Center" side.
Any help would be great as I am new to this job role and trying to be proactive in using another account rather then my Global Admin account for such a easy task.
Michael
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
You could add them to local administrators group.
https://woshub.com/add-domain-users-local-admin-group-gpo/
-
--please don't forget to upvote and Accept as answer if the reply is helpful--
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 11%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
This is not the answer he needs. As a Global Administrator you don't have to be added into the local administrator group. He (and also I) want to know if there is a role in Microsoft 365 admin center, what you can give to a cloud account (not onpremise/hybrid) to be able to install programs as administrator on machines with Entra signed in.