How to Reset MFA as an Administrative Unit Authentication Administrator
Question details
An Authentication Administrator scoped to an Administrative Unit needs to reset multifactor authentication (MFA) methods for users but cannot find the required options in the Microsoft 365 portal.
- Product
- Azure Active Directory / Microsoft 365
- Device & OS
- not provided
- Scenario
- Resetting multifactor authentication methods for non-administrator users within a specific administrative unit.
- Observed behavior
- The administrator is unable to locate the MFA reset options in the standard Microsoft 365 portal because their permissions are scoped only to an Administrative Unit in the Azure portal.
Ensure you have access to the Azure portal and verify that your account is assigned the Authentication Administrator role scoped to the target Administrative Unit.
Reset MFA via the Azure Active Directory Portal
Access the Azure portal to utilize scoped administrative privileges for managing user authentication methods.
When your Authentication Administrator role is scoped to a specific Administrative Unit, the permissions do not apply globally across the Microsoft 365 admin center. You must use the Azure portal to view, set, and reset authentication methods. Keep in mind that these permissions only allow you to manage non-administrator users within your assigned unit.
Navigate to the Azure portal (portal.azure.com) and log in using your administrator credentials.
From the left-hand navigation menu or the main search bar, select 'Azure Active Directory' (or Microsoft Entra ID).
In the Azure AD menu, click on 'Administrative units' and select the specific unit to which your administrative role is scoped.
Select 'Users' within that administrative unit, click on the target non-administrator user, and choose 'Authentication methods' from the left pane to view or reset their MFA settings.
Looking for a Lightweight Alternative to Microsoft Office?
Managing Microsoft 365 and Azure AD environments can involve complex administrative scopes. For everyday document editing, spreadsheet analysis, and presentations, WPS Office offers a free, lightweight, and highly compatible alternative to Microsoft Office that is easy to deploy and use without extensive administration.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your device.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to complete the setup process.
- 3. Open and Edit Documents: Launch WPS Office and instantly open your existing Microsoft Office files without formatting or compatibility issues.
Frequently Asked Questions
Why can't I reset MFA in the Microsoft 365 admin center?
If your Authentication Administrator role is scoped to a specific Administrative Unit rather than the entire directory, the standard Microsoft 365 admin portal may not display the necessary management options. You must use the Azure portal to manage users within your specific scope.
Can an Administrative Unit Authentication Administrator reset MFA for other admins?
No. An Authentication Administrator scoped to an Administrative Unit is only authorized to view, set, and reset authentication methods for non-administrator users within that specific unit.
How do I verify my role assignment for an Administrative Unit?
In the Azure portal, navigate to Azure Active Directory, select 'Administrative units', click on your specific unit, and then check the 'Roles and administrators' tab to confirm your scoped permissions.
