Inherited RM Unify and Office365 Edu questions

[JAB1a]

Hi All,

I have taken on a couple of local schools that are federated and use RM Unify for their SSO of Office365 and Google Services.

 

I only have experience with Office365 and Google services as stand alone products, so I have a few questions about how to administer things when RM Unify is involved.

 

The office staff have set me up with 'Super admin rights' via RM Unify but I don't seem to be able to access the Office 365 Admin Centre to change some mail flow rules in exchange. Am I right in thinking before the school moved over to RM Unify that they had a Global administrator account on Office365 that I would need to gain access too to give my user account the rights to use the Office365 Admin Centre?

 

Or is there some way I can edit my account in RM unify that will then grant me access to the Admin Centre? currently when I try and go to the Admin Centre I get a message saying I do not have the correct permissions.

 

I hope that made to sense. Please let me know if you need any more information

 

Thank you in advance

Edited May 3, 2022 by JAB1a

[Sonic007]

Sorry, Im not going to be much help, but I was in the same boat as you and in the end decided to leave RM and RMUnify as it was a PITA

 

I went round and round in circles as you need to be an Office365 global admin to be able to change things and then you are stuck as then you cant get in due to RMUnify stopping you.

 

There may be a better and quicker way to sort it but I certainly didnt find it.

[willtech]

To grant any global access it has to be done in Office 365 admin centre. They might have an onmicrosoft account that would be a global admin for when they did the federation.

[simpsonj]

Looking at our setup, the Super User in RM Unify isn't necessarily the global administrator in O365.

 

I would contact RM Support and ask them to make your account, or a separate admin account, a global admin in O365.

[JAB1a]

Thank you for your help and information.

 

Oh dear this does sound a bit complicated. To make changes on the Google services side, I found an account that allowed me access to the Admin centre, so I created a different username for myself (different to the RM Unify username I was given) with super admin rights which allows me to make changes there, I had hoped to make the same changes with Office365 but no account I can access has the right permissions to access the O365 AdminCentre.

 

So I guess my question now is.... should there be a user that still has access to the O365 Admin centre using their RM Unify username? so that I can get them to login and create me a new user with Global admin rights, or is there a way I can contact Microsoft to give me the correct permissions (with me proving my identity and right to access the system etc)?

[simpsonj]

RM should have access through the account created when federating the domain as @willtech mentioned.

[JAB1a]

Thank you for your fast replies. I will get in touch with RM Support to see what they can do for me. I will also try and track down if the schools have any .onmicrosoft accounts on record.

[IT_Man_Dan]

As above has already said. RM support is your way forwards here.

In the end we found RM Unify too much of a PITA also so decided to leave RM Unify last July and have been much happier since.

[simpsonj]

As above has already said. RM support is your way forwards here.

In the end we found RM Unify too much of a PITA also so decided to leave RM Unify last July and have been much happier since.

 

Just out of interest, what did you move to? Was it a pretty seamless transfer?

[Michael]

What does RMUnify do that AAD Connect doesn't (which is also free)?

[IT_Man_Dan]

Just out of interest, what did you move to? Was it a pretty seamless transfer?

 

We just went vanilla so ADD connect.

Did the un federation process last July which was really simple and then sorted out all our groups and teams as we wanted them.

95 percent of our AAD users matched up fine on first sync too.

 

It's so much easier to look after and make changes nowadays.

We then just created an intranet page with links to the services that RM Unify pointed to.

Edited May 3, 2022 by IT_Man_Dan

[simpsonj]

What does RMUnify do that AAD Connect doesn't (which is also free)?

 

For me, it's the fact it ties our O365, Google and MIS (SIMS) together, creating accounts and Teams automatically based off their timetable. Also, we've been using RM Unify for a fair few years now, so it's due for a review, but sometimes it's easier to keep something rolling over when it's doing a good enough job.

[StormTrooper59]

For me, it's the fact it ties our O365, Google and MIS (SIMS) together, creating accounts and Teams automatically based off their timetable. Also, we've been using RM Unify for a fair few years now, so it's due for a review, but sometimes it's easier to keep something rolling over when it's doing a good enough job.

 

Same at my place. It has worked well for us.

 

In terms of Office 365, our global admin accounts are the @onmicrosoft accounts so not tied to any RM Unify accounts. Providing someone else didn't change the accounts and/or passwords, RM should have a record of the credentials to be able to access it and create you an admin account.

[IT_Man_Dan]

For me, it's the fact it ties our O365, Google and MIS (SIMS) together, creating accounts and Teams automatically based off their timetable. Also, we've been using RM Unify for a fair few years now, so it's due for a review, but sometimes it's easier to keep something rolling over when it's doing a good enough job.

 

If you are happy with it then I agree there's no reason to change.

We only left as we personally found it didn't meet our needs.

The same for CC4, We haven't looked back since going away from that to a vanilla network but it's all dependant on the needs of each individual school/setup.

[foofighterjim]

Without going completely OT we are currently reviewing this as we are moving MIS providers and (to my knowledge) we can't easily leverage OneDrive files on demand on our domain computers as SSO auth only occurs once the user has opened a browser, it works fine on Intune devices though as that authenticates on login.

[EssentialRug]

We moved away from RM Unify a little while back and it was the best thing we've done. Prices were rising for it too and we found it too clunky and overpriced for what it was.