Roles and App Settings
In ServiceChanger
Last updated
In ServiceChanger
Last updated
ServiceChanger follows a static role-based model to keep permissions simple and clear. Unlike dynamic access control, this approach ensures straightforward role assignments that minimize complexity.
There are two user roles in ServiceChanger:
ServiceChanger Administrator
ServiceChanger Operator
Both roles have essential access, but Administrators have additional privileges related to system settings, bulk actions, and subscription management.
The table below outlines what each role can and cannot do:
Manage Third-Party Source setting
✅ Yes
❌ No (Button greyed out)
Manage Subscriptions
✅ Yes
❌ No (Button greyed out)
Generate All Attributes
✅ Yes
❌ No (Button greyed out)
Bulk Group Assigner
✅ Yes
❌ No (Button greyed out)
Bulk M365 Group Creator
✅ Yes
❌ No (Button greyed out)
✅ Keeps role management simple and prevents unnecessary complexity ✅ Ensures that only administrators can change system-wide settings ✅ Reduces risk by limiting access to bulk actions and subscription management
This structure allows organizations to securely manage access without making permissions overly complicated.
Certain settings in ServiceChanger affect all users, regardless of their role.
When enabled, all user attribute modifications (Job Title, Location, and Department) are disabled in ServiceChanger.
This ensures that Microsoft Entra ID follows an external source, such as an HR tool.
Edit Job Title, Location, Department (User Details Page)
Greyed out & disabled
Data Cleaner - Rename, Cancel, Save Buttons
Greyed out & disabled
Access rights are managed directly in Microsoft Entra ID. For detailed instructions, .
