Additional UAR Administrators

Additional UAR Administrators

Use these steps to add administrators after the initial UARAdmin role assignment described in Azure Application Permission - Step 4.

Step 1: Open the UAR Enterprise Application

1. Sign in to Microsoft Entra Admin Center with a Global Administrator or Application Administrator account.
2. Go to Microsoft Entra ID → Enterprise applications → All applications.
3. Remove the Application type == Enterprise Applications filter if the application is not listed.
4. Find and open UAR_CompanyName, replacing CompanyName with your organisation’s name. Use the Enterprise Application created after consent, not the Microsoft Graph sync app registration.
5. Select Users and groups.

---

Step 2: Check How Existing UAR Administrators Are Assigned

1. Review the existing assignments and find entries with the role UARAdmin.
2. Check whether those entries are groups or individual users:
   • Group assigned: Note the group name, for example UAR-Admins. Follow Step 3 to add the new administrators to that group.
   • Users assigned directly: Follow Step 4 to assign the new administrators directly to the application role.
   • Both groups and users assigned: Follow the method used for the administrators whose access you want to match. You do not need to assign a user directly if they are already a direct member of a group assigned to UARAdmin.

If there are no UARAdmin assignments, complete Azure Application Permission - Step 4 to set up the initial assignment.

---

Step 3: Add Administrators to the Existing Group

Use this option when an existing group is assigned to the UARAdmin role.

1. Go to Microsoft Entra ID → Groups → All groups.
2. Open the group identified in Step 2, for example UAR-Admins.
3. Select Members → + Add members.
4. Search for and select the users who need UAR administrator access.
5. Click Select to add them.
6. Confirm that the new users appear in the group’s Members list.

You need permission to manage the group’s membership, such as being its owner or a Groups Administrator. If you cannot edit the group, ask its owner or a Groups Administrator to add the users.

Add the users as direct members of the assigned group. Nested group membership does not grant the application role. If the group uses dynamic membership, ask the group administrator to check the membership rule instead of adding members manually.

The group is already assigned to UARAdmin, so no additional application role assignment is required. Continue to Step 5.

---

Step 4: Assign Administrators Directly to the App Role

Use this option when existing administrators are assigned as individual users.

1. Return to Microsoft Entra ID → Enterprise applications → All applications → UAR_CompanyName.
2. Select Users and groups → + Add user/group.
3. Under Users and groups, select the new users and click Select.
4. Under Select a role, choose UARAdmin and click Select.
5. Click Assign.
6. Confirm that each new user appears in Users and groups with the role UARAdmin.

---

Step 5: Refresh Sign-In and Confirm Access

1. Ask the new administrators to sign out and sign in again so their new role is included in their access tokens.
2. Have them sign in to https://companyname-uar.tikabu.io, using your organisation’s UAR URL.
3. Confirm that they can access the UAR administrator features.

If access is not available, check that the user is either a direct member of the group assigned to UARAdmin, or is assigned directly to UARAdmin on the correct Enterprise Application, then refresh their sign-in again.