Microsoft 365: keep the keys with the business
Whoever bought the Microsoft 365 subscription is its Global Administrator by default. If that person is the only admin, nobody else can reset a password.
Every step below is from Microsoft 365’s own help pages, checked on 6th October 2026. Screens change: if a step doesn’t match what you see, the linked page is the one to trust. Nothing here needs you to share a password.
Add a second admin
In your register this is field N.4 of the Microsoft 365 account.
- In the Microsoft 365 admin center, go to Users, Active users.
- Choose the person, then select Manage roles.
- Select the admin role they need and select Save changes.
Microsoft advises keeping the Global Administrator role to as few people as possible and giving others the narrowest role that does the job.
Source: Microsoft: assign admin roles
Turn on multifactor authentication for everyone
In your register this is field N.6 of the Microsoft 365 account.
- Sign in to the Microsoft Entra admin center as an administrator.
- Go to Entra ID, Overview, Properties, and select Manage security defaults.
- Set Security defaults to Enabled and select Save.
Every user then has to register for multifactor authentication.
Source: Microsoft: security defaults