Skip to content

Add hybrid identity administrator as a possible role for config change #1876

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
AugustDailey wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add hybrid identity administrator as a possible role for config change #1876

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/identity/hybrid/connect/migrate-from-federation-to-cloud-authentication.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -237,7 +237,7 @@ To choose one of these options, you must know what your current settings are.

![View Additional tasks](media/deploy-cloud-user-authentication/additional-tasks.png)

3. On the **Connect to Microsoft Entra ID** page, enter your Global Administrator account credentials.
3. On the **Connect to Microsoft Entra ID** page, enter your Global Administrator or Hybrid Identity Administrator account credentials.
Copy link

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This wording is a bit ambiguous (it can read like you have two different accounts). Consider rephrasing to something like “enter credentials for an account that’s assigned the Global Administrator or Hybrid Identity Administrator role” for clarity. Also, later in this article the authentication agent installation step still says a Global Administrator account is required (around line 296), so please confirm whether Hybrid Identity Administrator should be accepted there too and keep the role requirements consistent to avoid confusing readers.

Suggested change
3. On the **Connect to Microsoft Entra ID** page, enter your Global Administrator or Hybrid Identity Administrator account credentials.
3. On the **Connect to Microsoft Entra ID** page, enter credentials for an account that's assigned the Global Administrator or Hybrid Identity Administrator role.

Copilot uses AI. Check for mistakes.

4. On the **User sign-in** page:

Expand Down Expand Up @@ -338,7 +338,7 @@ On your Microsoft Entra Connect server, follow the steps 1- 5 in [Option A](#opt

**Complete the conversion by using the Microsoft Graph PowerShell SDK:**

1. In PowerShell, sign in to Microsoft Entra ID by using a Global Administrator account.
1. In PowerShell, sign in to Microsoft Entra ID by using a Global Administrator or Hybrid Identity Administrator account.
Copy link

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider rephrasing to “sign in … using an account assigned the Global Administrator or Hybrid Identity Administrator role” to avoid implying these are separate dedicated accounts. As with the earlier wizard step, please also ensure the role requirement is consistent with the rest of the article (there’s at least one other step that still states Global Administrator is required).

Suggested change
1. In PowerShell, sign in to Microsoft Entra ID by using a Global Administrator or Hybrid Identity Administrator account.
1. In PowerShell, sign in to Microsoft Entra ID by using an account assigned the Global Administrator or Hybrid Identity Administrator role.

Copilot uses AI. Check for mistakes.
```powershell
Connect-MGGraph -Scopes "Domain.ReadWrite.All", "Directory.AccessAsUser.All"
```
Expand Down