Let StaffHub provision accounts for deskless workers

Before StaffHub can create new Office 365 accounts for deskless workers, you need to grant it permission to read/write to your tenant directory.

For each account it creates, StaffHub does the following:

  • Assigns an ID in the form of FirstName.LastName@<domain>.com. If there's a conflict with an existing ID, a number is appended to the end of the alias.

  • Adds the account to the DesklessWorkers security group. This will let you easily keep track of all self-provisioned accounts, and generate reports if needed.

  • Creates the account in the Active Directory where permissions were applied.

Grant StaffHub access to create accounts

You need Office 365 global admin permissions to do these steps.

  1. Go to https://staffhub.ms/admin.

  2. Choose Grant Access.

    Choose Grant Access.

  3. Sign in to Microsoft StaffHub with the admin account for Active Directory that you want your deskless workers to be provisioned in. For most people, this is your Office 365 global admin account. To learn more, see If you have multiple Active Directories.

    Sign in with an AD admin account.

  4. Choose Accept to grant your consent to the app.

    Choose Accept

    This gives StaffHub permissions to create users in your directory. This also grants consent to StaffHub on behalf of all users in that directory, thus eliminating the need for you to grant consent when your users install the StaffHub app.

  5. It takes a while for StaffHub to set things up. Choose Refresh after 10 minutes or so.

    Choose Refresh.

  6. Choose the domain that you want your deskless workers to be provisioned in.

    Choose domain for your deskless worker accounts

    You're done! You can sign out.

Next steps

If you are a manager, here's what you do to get started using StaffHub:

If you have multiple Active Directories

If your business has multiple Active Directories, it matters which account you use to sign in to the Grant Consent process. You can only grant consent for the tenant for which are the primary user.

For example, let's say Rob@contoso.com was created in the Contoso.com directory, and he's a global admin. Rob@contoso.com is also a global admin for Fabrikam.com and is a member of that directory, but only as an external user.

If Rob@contoso.com signs in to grant consent, it will only apply to Contoso.com, his primary directory.

To grant consent to Fabrikam.com, Rob needs to create a new Rob@fabrikam.com account and specify it to be the admin for the directory.

See Also

Introducing Microsoft StaffHub

Share Facebook Facebook Twitter Twitter Email Email

Was this information helpful?

Great! Any other feedback?

How can we improve it?

Thank you for your feedback!