Who Belongs to the Microsoft 365 TenantAdmins Group? | Admin Guide
Question details
The user needs to know which administrative roles are included in the hidden Microsoft 365 TenantAdmins group and how to view or manage its membership.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing tenant administrator permissions and inspecting security group memberships within a Microsoft 365 environment.
- Observed behavior
- The TenantAdmins group is hidden in the standard admin portal, making it unclear who belongs to it or how to inspect its members.
Ensure you have Global Administrator privileges and have the necessary Microsoft PowerShell modules installed to inspect hidden Azure AD groups.
Understand and Verify the TenantAdmins Group via PowerShell
Since the TenantAdmins group is hidden in the standard admin portal, you must understand its automatic membership rules and use PowerShell to inspect user accounts.
Each Microsoft 365 tenant includes a hidden security group named TenantAdmins_<ID>. This group is not visible in the standard Microsoft 365 admin center.
You cannot manually add or remove members through the standard interface. Instead, any user assigned the Global Administrator role is automatically included in this group.
Open PowerShell on your system as an administrator to prepare for running Azure AD or Microsoft Graph commands.
Use the 'Connect-AzureAD' command and log in with your Microsoft 365 Global Administrator credentials when prompted.
Run the 'Get-AzureADUser' command to list all user accounts. You can further inspect specific accounts to verify their directory roles and administrative privileges.
Experience a Seamless and Lightweight Office Alternative
Managing Microsoft 365 environments and hidden security groups can require complex administrative oversight. If you are looking for a straightforward, highly compatible, and free alternative for your organization's daily document processing needs, WPS Office provides a complete suite without the heavy administrative burden.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded installation file and follow the straightforward on-screen instructions to set up the suite.
- 3. Open and Edit Documents: Launch WPS Office to instantly open, edit, and save your existing Microsoft Office documents without format conversion.
Frequently Asked Questions
Can I manually add a user to the TenantAdmins group?
No, the TenantAdmins group is managed automatically by Microsoft 365. Users who are assigned the Global Administrator role are automatically added to this hidden group.
Why can't I see the TenantAdmins group in the Microsoft 365 admin center?
Microsoft hides certain internal security groups, like TenantAdmins_<ID>, from the standard admin portal UI to prevent accidental modification or deletion that could disrupt core tenant administration.
Is there an alternative way to view hidden groups besides PowerShell?
Currently, PowerShell and the Microsoft Graph API are the primary supported methods for querying advanced or hidden internal directory objects within Azure AD and Microsoft 365.
