Microsoft Entra ID · Organizational Management
Extended Directory User Administrator
Manages all aspects of external user profiles in the extended directory for Teams.
Scope: Manage extended directory user profiles for Teams external users
Permissions
- Manage external user profiles
- Update extended directory entries
- Configure Teams external profiles
Common use cases
- Teams external user management
- Extended directory configuration
- External profile maintenance
Best practices
- Review external profiles regularly
- Maintain accurate information
- Coordinate with Teams admins
Security considerations
- Manages external user data
- Affects Teams collaboration
Common questions
When should I assign the Extended Directory User Administrator role?
Assign Extended Directory User Administrator when you need to: Teams external user management; Extended directory configuration; and External profile maintenance. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Extended Directory User Administrator role do?
The Extended Directory User Administrator role grants permissions including: Manage external user profiles; Update extended directory entries; and Configure Teams external profiles. See the Permissions section above for the full list.
What are the security risks of the Extended Directory User Administrator role?
Key considerations when assigning Extended Directory User Administrator: Manages external user data; and Affects Teams collaboration. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.