I've been building an employee database that lets users Search the Office365 users and displays their full profiles with profile picture.
Now in the most perfect world I need HR to be able to edit fields based on searching a user. They can Edit and update profiles this way. Of course they need some privileges on our AAD tenant to do this. I obviously want them to have as close to zero privileges on the network as possible. I've thought about using a service-account but this also isn't ideal.
One other way I'm thinking about is exporting all Users to a Sharepoint list and keeping this up to date with HR having privileges to this exact list. But that might be tricky to implement for a noob like me. I'm not sure how the importing and exporting of the list would go.
How would you approach this situation? Are there best practices I can view? Thanks for viewing!
