APSA-24527, APSA-24512, SUPSCIT-3133, SUPSCIT-3129, SUPSCIT-3130
-
Fix Description: We fixed an issue where provisioning could not be completed if the GDAP admin relationship has not been accepted by the customer. In this new version, GDAP is no longer required to complete the provisioning process. However, if provisioning is completed without the required GDAP configuration, it will not be possible to manage licenses and users in the subscription. To do this, the customer needs to have a GDAP admin relationship configured with the required roles, and then assign the Admin-Agents security group to the admin relationship. The list of required roles must be considered by the provider, but here is a default list of roles that Microsoft considers necessary:
-
Privileged authentication administrator
-
Privileged role administrator
-
User administrator
-
Helpdesk administrator
-
License administrator
-
Application administrator
-
Cloud application administrator
-
Service support administrator
-
Directory writers
-
Directory readers
-
Global reader
-