reduce permissions in partner relationships

Question

In the administration center of O365 I see a few companies with the GDAP role under my relationship partners.
If I look further into that, I see that they have full access to my tenant.

Administrator Skype for Business
Administrator of Office apps
Conditional Access Administrator
Security Administrator
Cloud application manager
Compliance Administrator
Domain name administrator
Exchange administrator
User Manager
Global admin
Global reader
Group admin
Help desk administrator
Intune admin
License Manager
Support specialist for Teams communication
Support engineer for Teams communication
SharePoint administrator
Teams device administrator
Teams admin
Teams communications manager
Application manager

Are these permissions all necessary, and can they be removed?

Answer 1

Hello @Ronny Cornelis

As per GDAP docs ([https://learn.microsoft.com/en-us/partner-center/gdap-faq) : GDAP helps with customers who have regulatory requirements to provide only least-privileged access to partners.

So answer to your question is yes, you could assign least privilege roles to the partner as per your business need.

Kindly follow: https://learn.microsoft.com/en-us/partner-center/gdap-least-privileged-roles-by-task to assign the best suitable least privileged roles to the partners.

Thanks,

Akshay Kaushik

Please "Accept the answer" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.