Skip to main content

Admin Access Manager Frequently Asked Questions

How long does it take for the role to be active?

Once approved, it can take up to two hours for the AD/Microsoft 365 (formerly Office 365) to appear with the role.

What are the length and character restrictions for account names?
  • For all accounts other than alternate-domain and Microsoft 365 (formerly Office 365) admin accounts, the character limit must be more than 8 characters and less than 55 characters.
  • Service accounts are suffixed with ".srv" for AD and "svc for Microsoft 365 (formerly Office 365).
  • Alternate domain is prefixed with the "domain-" for AD accounts.
  • Microsoft 365 (formerly Office 365) admin accounts are suffixed with "-admin."
What are the roles available for request through Admin Access Manager?

The following table shows the roles/privileges that are available for request through Admin Access Manager.

Account Type Admin Access Role/Privilege
AD Domain Admin AD Enterprise Admin AD Schema Admin O365 Global Admin

AD Alternative Domain Account

 Available Available Available  
AD Service Account        
O365 Admin Account       Available
O365 Application Account        
O365 Service Account        
Who can access the system?
Any Stanford staff member (stanford:staff) and any fully sponsored affiliate (stanford:sponsored-affiliate) has access to the system.
Who can request an admin access account?
Anyone with an active SUNet ID can log in and request an account and role.
Can I request an admin access account for someone else?
Anyone with an active SUNet ID can log in and request an account and role.
Last modified