You can assign users to a role in two different ways: Having too many global admins, with unlimited access to your data and online business, is a security risk. For example, if you need someone to help reset passwords, you shouldn't assign them the global admin role, you should assign them the password admin role. But if you need help getting things done, you can assign an admin role to a user. When you add new users, if you don't assign them an admin role then they are in the user role and don't have admin privileges to any of the Microsoft admin centers. This means you have unlimited control over the products in your subscriptions and you can access most data. Learn how to Manage your two-step verification settings.įind out how to Get started with the Microsoft Authenticator app so that you can use notifications to sign in, instead of texts and phone calls.If you're the person who purchased your Microsoft business subscription, you are the global admin. If you have problems signing in with two-step verification, get more information at Having trouble with Two-factor Authentication. You see different verification options based on how many you have set up. Select Use a different verification option. The following section shows you how to sign in with an alternate method when your primary method may not be available. This situation is why we recommend that you set up backup methods for your account. Sometimes you don't have the phone or device that you set up as your preferred verification method. Open the Microsoft Authenticator app on your phone and enter the code in the box where you are signing in. Microsoft prompts you for a verification code. When you're asked for a verification code, open the app and use whatever number is currently displayed.

This number changes every 30 seconds so that you don't use the same number twice. If you use the Microsoft Authenticator app to get verification codes, then when you open the app you see a number under your account name. To sign in using a verification code with the Microsoft Authenticator app If your company requires a PIN, enter it here. Open the notification on your phone and select the Verify key. Microsoft sends a notification to the Microsoft Authenticator app on your device. To sign in with a notification from the Microsoft Authenticator app You can receive push notifications on your device, or you can open the app to get a verification code. There are two different ways to use the app. The following information describes the experience of using the Microsoft Authenticator app for two-step verifications. Sign in with the Microsoft Authenticator app Microsoft sends you a text message that contains a verification code.Įnter the code in the box provided on the sign-in page. The following information describes the two-step verification experience with a text message to your mobile phone: Sign in to an application or service such as Microsoft 365 using your username and password.

The following information describes the two-step verification experience with a call to your mobile or office phone. Your sign-in experience differs depending on what you choose to use as your second factor: a phone call, an authentication app, or texts. For help with signing in, or to troubleshoot problems, see Having trouble with Two-factor Authentication. The purpose of this article is to walk through a typical sign-in experience.

Microsoft office portal