(So I Can Help You Fix Your Email Headaches)
Look, I get it. Microsoft 365 is mostly great… until it isn’t. Sometimes email delivery goes sideways, DNS records throw a tantrum, or your tenant decides to just vibe in a weird way. That’s where I come in. To help diagnose and fix these issues (especially the sneaky ones tied to your 365 setup), I occasionally need access to your tenant as a global admin. Maybe you don’t have an IT team to make changes for me, or you do and they’re not confident in making changes themselves.
I know handing over the keys to the kingdom sounds scary. But this post walks you through how to set up a dedicated global admin account just for me, without risking your own admin accounts. Bonus: no license is needed to create the account, though if you can assign a basic email license (like Exchange Online Plan 1 or anything that includes mail), that helps me run delivery tests directly.
And because security matters? I always make sure Multi-Factor Authentication (MFA) is enabled the moment I log in—whether it’s defaulted on or not. I’m… let’s say, enthusiastically paranoid about that stuff.
Step-by-Step: Create, License & Empower
1. Go to the Admin Center:
- Head over to https://admin.microsoft.com
2. Start Adding a New User:
- In the left-hand menu, click Users > Active users.
- Click Add a user.
3. Fill in User Details:
- First name: Anything simple like “Email”
- Last name: “Helper” (or whatever works)
- Username: Something like
emailhelper@yourdomain.com
4. Password Settings:
- Choose Let me create the password.
- Uncheck Require this user to change their password on first sign-in.
5. Product Licenses (Optional but Ideal):
- If you’ve got a spare license, assign it here:
- Exchange Online Plan 1 is enough.
- Microsoft 365 Business Basic, Business Standard, or anything else with email access also works.
- No spare license? No worries. I can still handle all the admin side without a mailbox.
6. Assign Roles:
- On the same setup page, scroll down to Roles.
- Select Admin center access > Global administrator.
7. Finish Up:
- Click Next, review the info, and hit Finish adding.
That’s it. One step, fully sorted: account created, licensed (if needed), and given global admin powers.
A Quick Note on MFA
Microsoft 365’s security defaults usually enforce MFA automatically for new global admin accounts. If for some reason it doesn’t, it’s the very first thing I’ll set up when I log in. No exceptions—I don’t mess around when it comes to security.
Final Checklist
- Account created
- Global admin role assigned
- (Optional) License added if you’ve got one
- MFA confirmed on my side
Please send the username and password securely (secure email or a proper password manager link. Whatever makes you feel comfortable). I’ll change the password when I first login to something insanely long and unguessable!
And once the work’s done, feel free to disable or delete the account as needed.
Pro Tip: If your tenant uses Conditional Access policies that restrict logins, make sure this new account is allowed to sign in. Saves time and headaches.
