When a new employee joins your business, their Microsoft 365 account is often the first part of their digital working environment. It gives them access to email, Teams, OneDrive, SharePoint and other tools they need to work productively.
For SMEs, getting this process right matters. A missing licence can delay someone’s first day. Incorrect permissions can expose sensitive information. Poor password handling can create an avoidable security risk.
The good news is that adding a user in Microsoft 365 is straightforward when you follow a consistent process. This Helpful Thursdays guide explains how to create a new account in the Microsoft 365 Admin Center, assign the right access and complete the essential onboarding tasks.
The goal is simple: reliable technology that works quietly in the background: the Invisible Infrastructure your team depends on every day.
Before You Begin: Microsoft 365 User Setup Checklist
Prepare the following information before opening the Admin Center:
- The employee’s full name
- Their preferred display name
- Their job title and department
- The username and email address they should use
- The correct company domain
- Their country or region for licensing purposes
- The Microsoft 365 licence they require
- Any shared mailboxes, groups or Teams they need to access
- Whether they need an administrative role
You also need the correct permissions to add users. Typically, a User Administrator or License Administrator can complete the process. A Global Administrator can also do it, but Microsoft recommends limiting the use of highly privileged accounts wherever possible. Assign people the lowest level of access required for their role.
You should also confirm that your organisation has an available Microsoft 365 licence. If there are no spare licences, you can still create the account and assign a licence later, but the employee will not have full access to the relevant Microsoft 365 services until licensing is complete.
Tip: Keep a simple onboarding checklist for every new starter. Consistency prevents small administrative tasks from becoming first-day problems.
How to Add a New User in Microsoft 365
1. Sign in to the Microsoft 365 Admin Center
Go to the Microsoft 365 Admin Center and sign in using an administrator account.
You may also be directed to Microsoft’s newer administration experience at admin.cloud.microsoft. The appearance can vary slightly depending on your tenant, permissions and Microsoft’s ongoing interface updates.
Avoid creating users from a personal Microsoft account or the standard Microsoft 365 user portal. User creation must be completed from the organisation’s administrative environment.
2. Open Users and Active Users
From the navigation menu, select:
Users > Active users
Then select Add a user.
Some tenants use a simplified view. In that case, you may see an Add user button directly on the home page or under the Users section. Both routes open the same user creation process.
3. Enter the New User’s Basic Information
The first part of the wizard is usually labelled Set up the basics.
Enter the employee’s:
- First name
- Last name
- Display name
- Username
The username normally becomes their sign-in address and primary email address. For example:
alex.taylor@yourbusiness.co.uk
If your organisation has more than one domain, select the correct domain from the available options. Double-check the spelling before continuing. Changing a username later can affect email addresses, sign-ins, shared documents and third-party integrations.
Use a consistent naming convention across your business, such as:
first.last@yourbusiness.co.ukfirstinitiallastname@yourbusiness.co.uk
Select Next when the details are correct.
4. Choose the Password Options
Microsoft 365 will ask you to configure the initial password.
You can either:
- Allow Microsoft 365 to generate a password automatically
- Create a temporary password yourself
Allowing Microsoft 365 to generate the password is usually the safer option. If you create one manually, use a long, unique password that is not based on the employee’s name, company name or start date.
Keep Require this user to change their password when they first sign in enabled. This ensures the new employee replaces the temporary password with one known only to them.
Do not send passwords through an unsecured group email or include them in a general onboarding document. Share initial sign-in details through a secure method, such as a password manager, secure file transfer or a direct handover.
Select Next to continue.
5. Assign the Appropriate Microsoft 365 Licence
The next stage is Assign product licenses.
First, select the employee’s Usage location. This is important because licensing availability and requirements can vary by country or region.
Then select the appropriate product licence. Depending on your subscription, you might see options such as:
- Microsoft 365 Business Basic
- Microsoft 365 Business Standard
- Microsoft 365 Business Premium
- Office 365 or enterprise plans
Choose the licence based on the employee’s actual responsibilities rather than assigning the most expensive option by default.
For example:
- A user who mainly needs web applications, email and Teams may need a different plan from someone who requires desktop Office applications.
- A user handling sensitive data may benefit from the additional security and device management features included in Microsoft 365 Business Premium.
- A frontline or shared-device worker may require a specialised licence.
You may also be able to expand Apps and select which applications are available under the assigned licence.
Select Next when licensing is complete.
Cost-control tip: Review your licence allocation regularly. Removing unused licences and matching plans to job requirements can reduce monthly costs without reducing productivity.
6. Review Optional Settings, Roles and Profile Information
The Optional settings stage normally includes Roles and Profile info.
Assign roles carefully
For a standard employee, select No admin access. This is the default and is appropriate for most users.
Only assign an administrative role when the person has a defined business need. Available roles may include:
- User Administrator
- Helpdesk Administrator
- Exchange Administrator
- SharePoint Administrator
- Teams Administrator
- Global Administrator
Follow the principle of least privilege. For example, someone who only needs to reset passwords should not receive Global Administrator access.
Microsoft provides further guidance in its documentation on assigning administrator roles.
Complete the user profile
Expand Profile info and add relevant details, such as:
- Job title
- Department
- Office location
- Business phone number
- Manager
- Employee information
Keeping profile data accurate helps colleagues find the right person in Microsoft 365 and supports address books, Teams and directory searches.
Select Next when finished.
7. Review the Settings and Create the Account
The final screen gives you an opportunity to check everything before the account is created.
Review:
- Name and display name
- Username and domain
- Temporary password settings
- Password-change requirement
- Usage location
- Assigned licences and applications
- Administrator roles
- Profile information
Pay particular attention to the username and licence. These are among the most common details to get wrong.
When everything is correct, select Finish adding.
Microsoft 365 will create the account and display the new user’s sign-in details. You may be able to print the details, save them as a PDF or send setup information to an email address.
Share the credentials securely and avoid storing an unprotected copy.
What the New Employee Does Next
The employee should go to microsoft365.com and select Sign in.
They will enter:
- Their new Microsoft 365 username
- The temporary password
- A new password when prompted
They may also be asked to verify account information or register for multi-factor authentication.
Once signed in, confirm that the employee can access the applications they need, such as Outlook, Teams, OneDrive and SharePoint. The first sign-in is a useful opportunity to check that licensing and permissions have been applied correctly.
Onboarding Extras Worth Setting Up
Creating the user account is only the beginning. A complete onboarding process should include the following checks.
Shared mailbox access
If the employee needs to monitor addresses such as sales@, accounts@ or support@, grant access to the relevant shared mailbox.
Give only the permissions they need, such as:
- Read and manage messages
- Send as the shared mailbox
- Send on behalf of the shared mailbox
Shared mailboxes should not be used as a replacement for individual user accounts. Each employee should have their own account for accountability and security.
Microsoft 365 groups and Teams
Add the employee to the relevant Microsoft 365 groups, Teams and SharePoint sites. Confirm that access is based on their job role rather than giving them broad access to every company resource.
This is particularly important for finance, HR, legal and customer information.
Multi-factor authentication and Microsoft Authenticator
MFA should be part of every new-user setup. It helps protect accounts even if a password is compromised.
Depending on your organisation’s configuration, the employee may be asked to register the Microsoft Authenticator app. Provide clear instructions and ensure they register a backup method where your security policy permits it.
Microsoft 365 security defaults or Conditional Access policies can help enforce MFA across your organisation.
Device and security checks
If the employee is using a company laptop, confirm that it has:
- Current operating system updates
- Endpoint protection
- Encryption enabled where appropriate
- Approved applications
- Secure Wi-Fi and VPN access, where required
These controls work together to create the durable, behind-the-scenes foundation of Tech That Lasts.
Common Microsoft 365 User Setup Mistakes to Avoid
Assigning the wrong domain
A typo or incorrect domain can create the wrong email address and cause confusion on the employee’s first day. Check the username carefully before completing the wizard.
Forgetting the usage location
Without a usage location, licensing may not apply correctly. Set it during user creation rather than leaving it for later.
Giving everyone administrator access
Global Administrator access is powerful and should be restricted. Use role-based permissions and review existing admin accounts regularly.
Sharing passwords insecurely
Never send temporary passwords in an unprotected email or instant message. Use a secure sharing process and require a password change at first sign-in.
Missing MFA setup
A new account without MFA is an easy target. Include Microsoft Authenticator registration in the onboarding checklist.
Assigning licences without checking requirements
Over-licensing increases costs. Under-licensing prevents employees from using essential applications. Match the licence to the employee’s work.
Forgetting shared resources
A user may be able to sign in but still be unable to access the mailbox, Teams or files they need. Confirm their practical access before their first working session.
Need Help With Microsoft 365 Onboarding?
Adding a Microsoft 365 user is simple when your tenant is already well organised. For many SMEs, however, onboarding sits alongside licence management, security policies, device setup, backup, user support and ongoing maintenance.
Anantek provides helpdesk and IT support services for businesses that need reliable assistance without building a large internal IT team. We can also help with cloud solutions, Microsoft 365 configuration and cyber security.
Whether you need support with one new starter or a repeatable onboarding process for your whole business, our Managed IT services are designed around practical outcomes: fewer delays, stronger security and technology that supports your people quietly in the background.
Contact Anantek for IT support for small business and build an onboarding process that delivers dependable Microsoft 365 for SMEs.
