How to Get Microsoft 365 Administrator Access Without an Extra License
Question details
The user needs a method to grant administrative access to an IT consultant in Microsoft 365 without having to purchase an additional paid user license.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up admin access for external IT consultants or staff to manage the tenant while keeping subscription costs down.
- Observed behavior
- A goal state of successfully assigning required administrative privileges to an account that has no standard Microsoft 365 product license attached.
Ensure you are currently signed into the Microsoft 365 Admin Center with an account that has Global Administrator privileges to manage users and roles.
Create an Unlicensed User and Assign Specific Admin Roles
You can add a new user without assigning them a product license, and then grant them specific administrative roles needed for their IT tasks.
Microsoft 365 allows the creation of unlicensed user accounts that can still be granted administrative privileges. This is highly beneficial for external IT consultants who only need to manage configurations, users, or billing, but do not require access to Office applications or an Exchange mailbox.
Navigate to admin.microsoft.com and sign in using your Global Administrator credentials.
On the left navigation menu, go to Users, then select Active users. Click on the 'Add a user' button at the top of the list.
Fill in the required fields such as First name, Last name, Display name, and Username. Set up a password for the IT consultant and click 'Next'.
On the 'Assign product licenses' page, select the option 'Create user without product license' (not recommended by default, but required for this process). Click 'Next'.
On the 'Optional settings' page, expand the 'Roles' section. Select 'Admin center access' and check the specific roles required for the consultant, such as Password Administrator, Exchange Administrator, or User Administrator. Avoid selecting Global Administrator unless absolutely necessary.
Review the user profile and role assignments, then click 'Finish adding' to create the unlicensed administrative account.
Save on Software Subscriptions with WPS Office
If managing licenses and subscription costs is a priority for your organization, consider switching to WPS Office. It provides a robust, highly compatible alternative to Microsoft Office desktop applications without the heavy subscription fees.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the downloaded file and follow the simple on-screen prompts to complete the installation.
- 3. Open Your Documents: Launch WPS Office and open your existing Microsoft Office files. They will load perfectly with their original formatting intact.
Frequently Asked Questions
Can an unlicensed user be assigned the Global Administrator role?
Yes, Microsoft 365 allows you to assign the Global Administrator role to a user account that does not have a paid product license. However, best security practices dictate assigning only the specific roles needed for the user's tasks.
Will an unlicensed admin account have an email inbox?
No. Because the account does not have an Exchange Online license attached, the admin user will not have an active mailbox. They must use an alternative email address for communication.
Can an unlicensed IT consultant use Microsoft Word or Excel?
No. An unlicensed account only has access to the Microsoft 365 Admin Center (based on their assigned roles). They cannot download, activate, or use Microsoft Office desktop or web applications.
Is there a limit to how many unlicensed admin accounts I can create?
Microsoft does not enforce a strict numerical limit on the number of unlicensed administrative accounts you can create, but you should regularly audit all admin accounts to ensure your tenant remains secure.
