Who this guide is for Tenant administrators responsible for staff access.
Before you start Know the operator's identity, email address, job responsibilities, start date, and the minimum permission groups required.
Steps 1. Open Tenant Operators and search for the person first to avoid creating a duplicate account. 2. Create or link the operator record using the verified name and business email address. 3. Assign only the roles and permission groups needed for the person's current work. 4. Review the group count and sensitive permissions, then send the approved invitation or password-reset email. 5. Ask the operator to sign in with their own account and verify that they can complete their assigned task but cannot see unrelated areas.
Check your work The operator is active in the correct tenant, has the right email and username, and has only the least access needed.
When to stop and ask for help Stop if the requested role includes high-risk finance, payroll, security, or system administration privileges without documented approval.