How to Fix Microsoft 365 Password Change Administrator Error
Question details
An administrator is unable to change a user's password because the system displays an error stating that only a global administrator can perform this action, despite no visible roles being assigned to the affected account.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to reset a user password via the Microsoft 365 admin center.
- Observed behavior
- The system incorrectly blocks the password reset process by prompting that global administrator privileges are required, even when the target account lacks administrator roles.
Ensure you have access to a Global Administrator account, as you will need the highest level of administrative privileges to verify hidden roles or override the current permission block.
Verify Roles and Reset Password in a Private Window
Using a private or incognito browsing window prevents cached credentials from causing permission conflicts, allowing a Global Administrator to accurately check role assignments and reset the password.
Browser cache and cookies can sometimes store conflicting login tokens, leading the Microsoft 365 admin center to incorrectly assess your administrative permissions. A private window ensures a fresh session.
Launch your web browser and open a new private or incognito window (e.g., Ctrl+Shift+N in Chrome or Ctrl+Shift+P in Edge).
Navigate to the Microsoft 365 admin center and log in with your Global Administrator credentials.
In the left-hand navigation menu, go to 'Users' and then select 'Active users'.
Select the affected user, open the 'Account' tab in the slide-out panel, and choose 'Manage roles'. Verify if any hidden or incorrect roles are assigned and remove them.
Once the roles are corrected or verified as standard, use the 'Reset password' button at the top of the user's profile panel to complete the change.
Use an Alternative Global Administrator Account
If your current admin account is experiencing backend permission glitches, leveraging a secondary Global Administrator account can bypass the error.
Contact Microsoft Technical Support
If multiple global administrators are unable to bypass the restriction, the account may be stuck in a backend role conflict that requires Microsoft Support to resolve.
Switch to WPS Office for a Hassle-Free Experience
While Microsoft 365 offers advanced enterprise controls, it can sometimes present complex permission and administrative errors. For teams and individuals seeking a robust, lightweight, and free alternative without complex account hierarchies, WPS Office is an excellent choice.
Frequently Asked Questions
Why does Microsoft 365 say only a global admin can change the password?
This error usually occurs if the affected user account has hidden administrative roles assigned to it, making it a highly privileged account. It can also happen due to a browser credential caching issue where the admin center incorrectly assesses the active user's permissions.
How do I find out who my global administrator is?
Standard users cannot see global administrator details directly for security reasons. You typically need to contact your organization's IT helpdesk, technical support team, or the person who provided your Microsoft 365 account credentials to identify the global admin.
What does 'Manage roles' do in Microsoft 365?
The 'Manage roles' section in the Microsoft 365 admin center allows global administrators to grant or remove specific administrative privileges—such as Exchange administrator, SharePoint administrator, or Helpdesk administrator—to individual users within the organization.
