In these organizations, only a subset of administrative users are allowed to edit properties based on their region or brand.Īzure Active Directory administrative units are a container of resources that can be used for delegating administrative permissions and applying policies to a subset of users.

For example, license management or helpdesk for different countries, brands, and organizations. While the delegation of permissions in Exchange Online works very well with Role Based Access Control (RBAC), other applications and services are hard to manage at a granular level. This is especially true for large organizations or universities with multiple brands or decentralized administration within a single Office 365 tenant, the default admin roles can cause headaches. Each admin role maps to common business functions and gives your users permissions to do specific tasks in the Office 365 admin center and Windows PowerShell. Office 365 comes with a set of admin roles that can be assigned to users within your organization.

Active directory delegation report