---
title: How to Create a User with Global Administrator Permissions in Microsoft 365
description: "## Overview This article explains how to create a new user in Microsoft 365 and assign them the **Global Administrator** role. Global Administrator is the highest-level role and should only be given to trusted individuals as it grants full access to all…"
url: "https://www.domaincentral.com.au/help/create-a-user-with-global-administrator-permissions-in-microsoft-365/"
updated: "2026-08-14"
category: Email / Microsoft 365
---

# How to Create a User with Global Administrator Permissions in Microsoft 365

## Overview

This article explains how to create a new user in Microsoft 365 and assign them the **Global Administrator** role. Global Administrator is the highest-level role and should only be given to trusted individuals as it grants full access to all Microsoft 365 services and settings.

---

## Step 1: Sign in to Microsoft 365 Admin Center

1. Go to[ https://admin.microsoft.com.](https://admin.microsoft.com.)
2. Sign in with an existing **Global Administrator** account.

---

## Step 2: Create the New User

1. In the left-hand navigation pane, select **Users > Active users**.
2. Click **Add a user**.
3. Enter the required details:
   - **Name** (First and Last)
   - **Display name**
   - **Username (UPN)** → example: user@yourdomain.com
4. Choose the **Automatically create a password** option (recommended).
5. Ensure **Require this user to change their password when they first sign in** is checked.
6. Click **Next**.

---

## Step 3: Assign the Global Administrator Role

1. On the **Assign product licenses** page, select a license if required.
2. Continue to the **Optional settings > Roles** section.
3. Select **Admin center access**.
4. Choose **Global Administrator** from the list of roles.
5. Click **Next**.

---

## Step 4: Review and Finish

1. Review the details you entered.
2. Click **Finish adding**.
3. Copy or download the user’s credentials securely.

---

## Step 5: Test the New Global Administrator Account

1. Sign out of the Admin Center.
2. Log in with the new user’s credentials.
3. Confirm that the account can access **Admin Center** and has full admin rights.

---

## Security Best Practices

- Limit the number of Global Administrators to **two or three maximum**.
- Use **Privileged Identity Management (PIM)** or enable **Multi-Factor Authentication (MFA)** on all admin accounts.
- Do not use Global Admin accounts for day-to-day email or Teams activity.

---

⚠️ **Important:** Only assign the Global Administrator role when absolutely necessary. For everyday tasks, consider assigning more restrictive roles such as User Administrator, Exchange Administrator, or SharePoint Administrator.