Dear all
We have the following siutaiton / problem:
- A large enterprise customer is using VDC M365
- Scoped RBAC roles / admin assignments are in place
- Such a scoped admin is by example only responsible for the users in a certain country
Under normal circumstances, everything works fine. The delegated admins can restore what they should based on the RBAC rule set & scope.
But when a user is deleted and not anymore protected by VDC365, only "global" admins which do not have a scope on their RBAC rule can see the deleted user for restore.
The behavior is intended as the support confirmed to the customer (Case: #07758232)
Without having a solution which allows for delegeted restores without granting the full tenant scope, the customer will not discuss with us to protect the complete tenant of 55k users with us.
I think others will run into that problem as well that's why I'm opening a forum thread here.
PRT-980 is created to attach other customers affected.
Best regards, Christoph
We have the following siutaiton / problem:
- A large enterprise customer is using VDC M365
- Scoped RBAC roles / admin assignments are in place
- Such a scoped admin is by example only responsible for the users in a certain country
Under normal circumstances, everything works fine. The delegated admins can restore what they should based on the RBAC rule set & scope.
But when a user is deleted and not anymore protected by VDC365, only "global" admins which do not have a scope on their RBAC rule can see the deleted user for restore.
The behavior is intended as the support confirmed to the customer (Case: #07758232)
Without having a solution which allows for delegeted restores without granting the full tenant scope, the customer will not discuss with us to protect the complete tenant of 55k users with us.
I think others will run into that problem as well that's why I'm opening a forum thread here.
PRT-980 is created to attach other customers affected.
Best regards, Christoph
Statistics: Posted by ChristophWeber — Jul 11, 2025 2:07 pm
