Module 1 of 9

📚 M365 Admin Center Course · Module 1 of 9

Overview & Navigation

📂 Course: M365 Admin Center
📦 Module: 1 of 9
🎯 Exam: MS-102
⏱ Read time: ~20 min

MS-102 Exam Alignment
MS-102

Deploy and configure Microsoft 365 tenant: navigate the M365 Admin Center, understand the role of each admin section, access specialist admin centers, and connect via Microsoft Graph PowerShell.

Know the URL for the M365 Admin Center (admin.microsoft.com)
Understand the difference between Simplified view and All Categories view in the left nav
Know which admin role is required to access the admin center
Identify which specialist admin center manages each M365 workload
Connect to Microsoft Graph PowerShell with appropriate scopes

Exam Tip: MS-102 regularly tests knowledge of admin center URLs and the Global Reader role. Know that a standard licensed user with no admin role cannot access admin.microsoft.com at all, and that Global Reader provides read-only access without the ability to make changes.

The Microsoft 365 Admin Center at admin.microsoft.com is the single web portal from which administrators manage every aspect of a Microsoft 365 tenant — users, groups, licenses, roles, service health, and settings. Before you can manage anything, you need to understand the interface. This module walks you through the portal from first login to confident daily navigation.

🏛️ What is the M365 Admin Center

💡 The Central Hub

The Microsoft 365 Admin Center is a web-based portal that provides a unified interface for managing your organisation's Microsoft 365 tenant. It is the primary tool for IT administrators to:

Create and manage user accounts and groups
Assign and remove product licenses
Configure organisation-wide settings
Monitor service health and check for incidents
Access specialised admin centers (Exchange, Teams, SharePoint, Intune, Entra ID)
Read planned Microsoft changes via the Message Center

The Admin Center is accessed at admin.microsoft.com and requires a Microsoft 365 account with at least one admin role assigned. Global Administrator has full access; specific roles grant scoped access to relevant sections only.

🌐 Accessing the Admin Center

admin.microsoft.com

Microsoft 365 admin center
|
Home

🔒
https://admin.microsoft.com

①

🏠 Home

Users

Active users

Deleted users

Teams & Groups

Active groups

Billing

Licenses

Health

Service health

Home

Active users

247

Licenses

300

Service health

✅ All healthy

RECOMMENDED ACTIONS

→ Complete your security setup Action needed

→ Review sign-in activity for admin accounts

① Navigate to admin.microsoft.com in any browser. You can also reach it from the Microsoft 365 portal (portal.microsoft.com) by clicking the app launcher (⊞ waffle) and selecting Admin. Only accounts with an assigned admin role see the Admin option — standard users do not.

🏠 The Home Dashboard

The Home page is your at-a-glance overview of the tenant. It shows summary cards, recommended actions, and service health status. Cards are customisable — you can add, remove, and rearrange them using the + Add card button.

Home Card	What It Shows
Active users	Total number of licensed and unlicensed accounts in the directory
Licenses	Total available licenses vs assigned — quick check for over or under licensing
Service health	Current status of all M365 services — green means all healthy
Message center	Count of unread planned change notifications from Microsoft
Recommended actions	Security and configuration tasks Microsoft recommends you complete

📋 Left Navigation Panel

M365 Admin Center › Left Navigation — All Categories

Microsoft 365 admin center
|
Navigation — All categories view

🏠 Home

Users

Active users ①

Deleted users

Guest users

Teams & Groups

Active groups ②

Billing

Licenses ③

Roles

Role assignments ④

Health

Service health

Message center ⑤

Admin centers

Exchange

Teams

SharePoint

Navigation sections explained

① Users → Active users — Create, edit, delete, reset passwords, manage licenses per user

② Teams & Groups — M365 Groups, Security Groups, Distribution Lists, shared mailboxes

③ Billing → Licenses — View available seats, assign licenses, track consumption

④ Roles → Role assignments — Assign and audit built-in admin roles

⑤ Health → Message center — Microsoft's planned change notifications and action-required items

ℹ By default the left nav shows Simplified view — a condensed list of the most-used items. Click "Show all" at the bottom to expand to All Categories view, which reveals every section and sub-item. Your preference is saved between sessions.

🔀 Switching Between Admin Centers

💡 The Admin Centers Hub

The M365 Admin Center is the gateway to many specialised admin portals. Each Microsoft 365 workload has its own dedicated admin center, all accessible via Admin centers in the left navigation:

Admin Center	URL	What You Manage
M365 Admin Center	admin.microsoft.com	Users, groups, licenses, roles, service health
Exchange Admin Center	admin.exchange.microsoft.com	Email, mail flow, mailboxes, connectors
Teams Admin Center	admin.teams.microsoft.com	Teams policies, meetings, calling, devices
SharePoint Admin Center	[tenant]-admin.sharepoint.com	Sites, sharing policies, storage, migration
Microsoft Entra ID	entra.microsoft.com	Identity, Conditional Access, MFA, sync
Microsoft Intune	intune.microsoft.com	Device management, app deployment, compliance
Microsoft Purview	purview.microsoft.com	Compliance, DLP, retention, eDiscovery
Microsoft Defender	security.microsoft.com	Threat protection, secure score, alerts

⚠️ Key Point — Role Scoping

Each admin center has its own role requirements. The Global Administrator role grants access to all admin centers. Other roles are scoped — an Exchange Administrator can access the Exchange Admin Center but not the Teams Admin Center. Assign roles based on the principle of least privilege.

⚙️ Personal Settings & Interface Options

The ⚙️ gear icon in the top-right corner opens your personal settings. These are per-account preferences stored in the portal:

Dark mode — Toggle between light and dark interface. Persists in your browser session
Language & time zone — Set your preferred display language and time zone for the portal
Simplified view vs All categories — Toggle the left navigation layout
Notification preferences — Configure email notifications for service health incidents and Message Center updates

⚡ PowerShell: Connecting to Microsoft 365

💡 Microsoft Graph PowerShell

Everything in the M365 Admin Center GUI can also be done via Microsoft Graph PowerShell — the modern replacement for the older MSOnline and AzureAD modules. The module is Microsoft.Graph and communicates via the Microsoft Graph API. MSOnline and AzureAD still work but Microsoft has announced their deprecation.

PowerShell — Install & Connect to Microsoft Graph

# Step 1 — Install the module (run once, as current user)
Install-Module Microsoft.Graph -Scope CurrentUser

# Step 2 — Connect with the permission scopes you need
Connect-MgGraph -Scopes "User.Read.All","Group.Read.All","Directory.Read.All"

# Step 3 — Verify your connection and active permissions
Get-MgContext

# Step 4 — Disconnect when finished
Disconnect-MgGraph

⚠️ About Scopes

When you connect with Connect-MgGraph -Scopes, you declare what permissions you need. Read.All scopes are read-only. Add ReadWrite.All scopes only when you need to make changes. Always request the minimum scopes required for the task at hand.

🎓 Interview Q&A

Q: What is the URL for the Microsoft 365 Admin Center, and what role do you need to access it?

The M365 Admin Center is at admin.microsoft.com. You need at least one admin role assigned to your account — the Reports Reader role provides the most restricted read-only access, while Global Administrator provides full unrestricted access. Standard licensed users without any admin role cannot access the Admin Center at all.

Q: What is the difference between the M365 Admin Center and specialised admin centers like Exchange or Teams?

The M365 Admin Center (admin.microsoft.com) is the central hub for cross-service tasks — users, groups, licenses, roles, and service health. Specialised admin centers are dedicated portals for deep configuration of each workload. The M365 Admin Center provides links to all specialised centers via its Admin centers section. You need the appropriate role to access each specialised center.

Q: What does the Service Health section show?

Service Health shows the current operational status of all Microsoft 365 services — Exchange Online, Teams, SharePoint, OneDrive, Entra ID, etc. It displays active incidents, advisories, and a historical log of past incidents. When users report issues, checking Service Health first tells you in seconds whether it is a Microsoft-side problem or something in your own environment.

Q: What PowerShell module is used to manage Microsoft 365?

The modern module is Microsoft Graph PowerShell (Microsoft.Graph), which communicates via the Microsoft Graph API. Install it with Install-Module Microsoft.Graph and connect with Connect-MgGraph -Scopes. It replaces the older MSOnline and AzureAD modules, which Microsoft has announced for deprecation.

Q: What is the Message Center in the M365 Admin Center?

The Message Center (Health → Message center) is where Microsoft publishes planned changes to Microsoft 365 services — new features rolling out, features being retired, required admin actions before a deadline, and policy changes. Admins should review it regularly and can configure a weekly email digest delivered to a shared mailbox.

🎯 MS-102 Mock Test

Module 1 — M365 Admin Center: Overview & Navigation

5 questions · Scenario-based · MS-102 exam style · Pass mark: 70%

Question 1 of 5

A new IT administrator needs to manage user accounts and licences in Microsoft 365. What is the correct URL they should navigate to?

Aportal.azure.com

Badmin.microsoft.com

Cportal.office.com

Dsecurity.microsoft.com

✅ Correct answer: B. The Microsoft 365 Admin Center is at admin.microsoft.com. portal.azure.com is the Azure portal. portal.office.com is the user-facing M365 app launcher. security.microsoft.com is the Microsoft Defender portal.

Question 2 of 5

A partner auditor needs to review all Microsoft 365 admin center settings and configurations without making any changes. Which role should you assign?

AGlobal Administrator

BGlobal Reader

CSecurity Reader

DReports Reader

✅ Correct answer: B. Global Reader provides read-only access across all Microsoft 365 admin centers — the auditor can see everything without the ability to make changes. Global Administrator would allow changes (too much access). Security Reader is limited to security-related views. Reports Reader only sees usage reports.

Question 3 of 5

An administrator cannot find the Microsoft Teams admin center in the M365 Admin Center left navigation. The navigation is in Simplified view. What is the most likely solution?

AAssign the Teams Administrator role to the admin account

BContact Microsoft support — the Teams admin center may be unavailable

CClick "Show all" at the bottom of the left navigation to switch to All Categories view

DNavigate directly to admin.teams.microsoft.com

✅ Correct answer: C. In Simplified view, Admin centers links are hidden. Clicking "Show all" expands to All Categories view, which reveals the full navigation including the Admin centers section where Teams admin center is listed.

Question 4 of 5

An administrator wants to run Microsoft Graph PowerShell cmdlets to manage M365 users. They have installed the Microsoft.Graph module. What must they run before any cmdlets will work?

AGet-MgContext to check the connection status

BImport-Module Microsoft.Graph to load the module

CConnect-MgGraph with the required permission scopes

DSet-ExecutionPolicy RemoteSigned to allow scripts

✅ Correct answer: C. Connect-MgGraph authenticates the PowerShell session against Microsoft 365 and establishes the permissions needed for your cmdlets. Without it, all Graph cmdlets will fail with an authentication error.

Question 5 of 5

A user with a Microsoft 365 E3 licence navigates to admin.microsoft.com and receives a "You don't have permission to access this page" error. What is the most likely cause?

AThe user's E3 licence does not include access to the admin center

BNo admin role has been assigned to the user's account

CThe user's browser is blocking Microsoft admin sites

DMulti-factor authentication must be enabled for admin center access

✅ Correct answer: B. Access to the M365 Admin Center requires at least one admin role assigned to the user's account — a licence alone is not sufficient. Standard licensed users with no admin role cannot access admin.microsoft.com regardless of which licence they have.