Sign in as an administrator - Global Administrator Login needs Elevated Permissions

Question

Sign in as an administrator - Global Administrator Login needs Elevated Permissions

Hannah Cartwright 0

I am the global administrator on my business account (1 am the sole owner and employee).

When I try and change anything on my computer or install software I am asked to login, but I recieve a message that "the rquested operation requires elevation".

I have checked in microsoft user admin and I am the global administrator and there are no other administrators.

This is a brand new installation on a new computer, which I was aided in setting up by a microsoft team member.

0 comments

2 answers

Your answer

Answer 1

Global Administrator in Microsoft 365 does not automatically give local administrator rights on a Windows PC. That is why the account can be a tenant admin in Microsoft 365 and still get “the requested operation requires elevation” on the device.

For this scenario, use this order of checks:

Confirm whether the Windows account is a local administrator
Go to Start → type Control Panel → User Accounts → Change your account type.
- If Administrator is selected, the account already has local admin rights.
- If it is not selected, the current Windows account is not a local administrator.
Check whether the PC is joined to a domain or work environment
Open Control Panel → System and Security → System.
At the bottom:
- Domain: means the PC is joined to a domain.
- Workgroup: means it is not domain-joined.
If Office installation is the immediate issue
For Office install prompts or error 0-1005 / 0-2005:
- Select Yes on the User Account Control prompt.
- Locate the downloaded Office installer .EXE, right-click it, and select Run as administrator.
- If needed, open Control Panel → Security and Maintenance → expand Security and make sure User Account Control is On.
If the account is not an administrator
A Windows administrator account on that device is required to approve elevation or change the account type. If the Administrator option cannot be selected, the documented guidance is to contact the person who has administrator rights on the computer and have them either:
- grant admin privileges, or
- enter their administrator username and password when prompted.
If this is a work or school managed account setup
If the device was set up with a work account and there is no usable local administrator, the business or organization admin/help desk is the path Microsoft documents for account/admin recovery. For a sole-owner business, that means identifying whoever originally provisioned or manages the device setup, if anyone did.
If Teams or Microsoft 365 shows admin status but Windows still blocks changes
That is expected behavior. Cloud admin roles and local Windows elevation are separate.

A clean summary of the issue:

Microsoft 365 Global Administrator = admin for cloud services.
Windows local administrator = required for software installs and elevated changes on the PC.
The error indicates the Windows device is not recognizing the signed-in account as having the required local elevation rights.

Answer 2

Hello Hannah,

The message “the requested operation requires elevation” is coming from Windows itself, not Microsoft 365. Being a Global Administrator in Microsoft Entra ID (Azure AD) or Microsoft 365 does not automatically make your local Windows account an administrator with elevated rights. Those are two different layers of administration.

On a brand-new Windows installation, you need to ensure that the account you are signing into is part of the local Administrators group. To confirm this, press Win + R, type netplwiz, and check the properties of your user account. Under the “Group Membership” tab, it should show “Administrator.” If it shows “Standard user,” you will not be able to elevate privileges even though you are a Global Admin in Microsoft 365.

If your account is already listed as Administrator but you still see the elevation prompt, it means you are hitting User Account Control (UAC). In that case, you must explicitly run the program as administrator. Right-click the installer or application and select “Run as administrator.” This is by design in Windows security: even administrators run with standard user rights until they elevate.

If you want to avoid constant prompts, you can adjust UAC settings. Go to Control Panel > User Accounts > Change User Account Control settings and move the slider down to “Notify me only when apps try to make changes (do not dim my desktop)” or lower. Be cautious, though-reducing UAC weakens protection against unauthorized changes.

In short, your Microsoft 365 Global Admin role does not grant local elevation. You need to verify your Windows account is in the Administrators group and then use “Run as administrator” when prompted.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!HP.