Empowerment of users is always great, we all want to be able to do some required actions when we want to, instead of logging requests and waiting for the actions to occur.
The Microsoft EMS is a combined set of cloud services wrapped up in one license formule. More info can be found here : https://www.microsoft.com/en-us/cloud-platform/enterprise-mobility. But today we focus on the
olympic games in Rio 2016 self serivce group management and password reset.
First we need to enable the required features in Azure AD.
Now add the test user to the required Azure groups and open https://myapps.microsoft.com
Now this user can create new security or office 365 groups ( depending on the group membershp above )
Now what’s really great is that we can delegate the group membership ( adding or removing users to the group ) to the group owners. We could also do this using AD and supply a users and computers mmc internally or use FIM but this is straight out of the box.
Let’s see how it looks.
Now we can create a new group ( we’ll use an O365 group )
Now we have set up this group to require owner approval, so in this case we can decide who can be a member.
So if we log on with another user ( with an EMS license ) , look for the group we can request access !
And the owner can approve / deny,
And the requested user can verify the status of his request using the same interface but my requests
That’s it , great functionality for delegating the creation and the ownership of security or office 365 groups. Power to the users !