ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 7/9 advisories · checked 02:30 UTC Customize Public modeDiscuss ChangeIntel on Discord
MC718551 Plan for changeUpdated messageFeature updateAdmin impact

Microsoft SharePoint: New Embedded Admin role impact

Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
SharePoint Online
Microsoft 365 admin center

Rollout

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

Schedule dates changed in the text

Date phrases in schedule sentences differ between the versions this installation saw
  • Seen 17 May 2024 early May 2024 → late May 2024

Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.

What the notice says

Microsoft’s text, with source markup removed
Updated May 17, 2024: We have updated the content below with additional information on managing the assigned roles.  Microsoft SharePoint Embedded, currently in Public Preview, is an API-only solution empowering app developers to leverage the file and document storage in Microsoft 365 to create line-of-business or multitenant applications. Microsoft Loop is an example of a SharePoint Embedded application. We are introducing the SharePoint Embedded Administrator role, which will have the capability to manage various aspects of SharePoint Embedded Applications and containers. This role will be available in Microsoft 365 admin center. With the introduction of this new role, Global Administrator can continue to create and manage SharePoint Embedded applications. However, as of mid-March 2024, the SharePoint admin role will lose the ability to execute SharePoint Embedded application and container-specific cmdlets (outlined below) as we roll-out the new role integration. After the rollout, only Global Administrators or SharePoint Embedded Administrators will be authorized to execute such cmdlets. Please track this document for the announcement of availability of the new SharePoint Embedded Administrator role in the Microsoft admin center.  When this will happen: Public Preview: We will begin rolling out early March 2024 and expect to complete by late March 2024. General Availability: We will begin rolling out mid-April 2024 and expect to complete by late May 2024 (previously early May). How this will affect your organization: Tenants creating SharePoint Embedded Applications Admins who want to create a new containertype through PowerShell cmdlets should be assigned the Global Administrator or the SharePoint Embedded Administrator to be able to execute all the available SharePoint Embedded developer admin cmdlets such as. New-SPOContainerType  Get-SPOContainerType Set-SPOContainerType  Admins who want to run the VS code extension to create SharePoint Embedded ContainerTypes should also be assigned the Global Administrator or the SharePoint Embedded Administrator role. Tenants Registering SharePoint Embedded Applications for use Admins who want to manage containers created on their tenants should be assigned the Global Administrator or the SharePoint Embedded Administrator to run the PowerShell execute all SharePoint Embedded consuming tenant admin cmdlets. Get-SPOApplication Set-SPOApplication (Future) Get-SPOContainer Set -SPOContainer Remove-SPOContainer Get-SPODeletedContainer Restore-SPODeletedContainer Remove-SPODeletedContainer What you need to do to prepare: The SharePoint Embedded Administrator role is now visible on Entra. Assign this new role to yourself to continue to use the container management cmdlets on PowerShell and access containers on the new UX that will be launched shortly. Please note, that Global administrator will continue to have access to the container management cmdlets as well as the UX for containers.  Alternatively, the Global administrators can assign the SharePoint Embedded Administrator role using the following PowerShell cmdlet: > Install-Module Microsoft.Graph > Connect-MgGraph -Scopes "RoleManagement.ReadWrite.Directory,User.Read.All" > $userId = "6bd30fc4-057c-409e-991b-a76fcd4510ab" > $roleId = "1a7d78b6-429f-476b-b8eb-35fb715fffd4" > $roleDefinition = Get-MgRoleManagementDirectoryRoleDefinition -UnifiedRoleDefinitionId $roleId > $roleassignment = New-MgRoleManagementDirectoryRoleAssignment -DirectoryScopeId '/' -RoleDefinitionId $roleDefinition.Id -PrincipalId $userId

Microsoft Entra roles mentioned

Links open the current public role definition. A mention does not establish tenant impact, assignment, or historical permissions.

What changed

Between archive captures, newest first

  1. Updated April 2,May 17, 2024: We have updated the content below with additional information on managing … We will begin rolling out mid-April 2024 and expect to complete by earlylate May 2024.2024 (previously early May). How this will affect your organization: Tenants creating SharePoint Embedded Applications Admins …

    • Tags Feature update, Admin impact → Updated message, Feature update, Admin impact

    Updated April 2, 2024: We have updated the content below with additional information on managing the assigned roles.  Microsoft SharePoint Embedded, currently in Public Preview, is an API-only solution empowering … of the new SharePoint Embedded Administrator role in the Microsoft admin center.  [WhenWhen this will happen:]happen: Public Preview: We will begin rolling out early March 2024 and expect to complete by late March 2024. Standard Release:General Availability: We will begin rolling out mid-April 2024 and expect to complete by early May 2024. [HowHow this will affect your organization:]organization: Tenants creating SharePoint Embedded Applications Admins who want to create a new … admin cmdlets. Get-SPOApplication Set-SPOApplication (Future) Get-SPOContainer Set -SPOContainer Remove-SPOContainer Get-SPODeletedContainer Restore-SPODeletedContainer Remove-SPODeletedContainer [WhatWhat you need to do to prepare:]prepare: The SharePoint Embedded Administrator role is now visible on Entra. Assign this new role to yourself to continue to use the container management cmdlets on PowerShell and access containers on the new UX that will be launched shortly. Please assignnote, that Global administrator will continue to have access to the container management cmdlets as well as the existingUX for containers.  Alternatively, the Global Admin role oradministrators can assign the new SharePoint Embedded AdminAdministrator role (available early March) in the Microsoft 365 admin center to create or manage SharePoint Embedded applications. You may want to notify your users about this change and update any relevant documentation as appropriate.using the following PowerShell cmdlet: > Install-Module Microsoft.Graph > Connect-MgGraph -Scopes "RoleManagement.ReadWrite.Directory,User.Read.All" > $userId = "6bd30fc4-057c-409e-991b-a76fcd4510ab" > $roleId = "1a7d78b6-429f-476b-b8eb-35fb715fffd4" > $roleDefinition = Get-MgRoleManagementDirectoryRoleDefinition -UnifiedRoleDefinitionId $roleId > $roleassignment = New-MgRoleManagementDirectoryRoleAssignment -DirectoryScopeId '/' -RoleDefinitionId $roleDefinition.Id -PrincipalId $userId

  3. … of the new SharePoint Embedded Administrator role in the Microsoft admin center.  When[When this will happen:happen:] Public Preview: We will begin rolling out early March 2024 and expect … rolling out mid-April 2024 and expect to complete by early May 2024. How[How this will affect your organization:organization:] Tenants creating SharePoint Embedded Applications Admins who want to create a new … admin cmdlets. Get-SPOApplication Set-SPOApplication (Future) Get-SPOContainer Set -SPOContainer Remove-SPOContainer Get-SPODeletedContainer Restore-SPODeletedContainer Remove-SPODeletedContainer What[What you need to do to prepare:prepare:] Please assign the existing Global Admin role or the new SharePoint Embedded …

  4. · first version seen

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 02:30 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.