split administrative rights at Domain level in office365

Ajaz Khan 266 Reputation points
2021-04-28T10:29:29.587+00:00

Hi Team,
We have a requirement to create admin roles on domain level in office 365. We have multiple domains in office 365 and wish if we could create admin accounts who can manage only specific domains in the single O365 tenant. is it possible? if not what would be the best possible approach.

Office Management
Office Management
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Management: The act or process of organizing, handling, directing or controlling something.
2,069 questions
{count} votes

Accepted answer
  1. Vasil Michev 100.2K Reputation points MVP
    2021-04-28T12:28:59.06+00:00

    No, at least not across the entirety of O365. Best you can do currently is use Administrative units: https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units
    They have quite few limitations though, so it depends on what actions exactly you need to do/restrict. And they're not supported by all workloads. So you might as well examine some workload-specific controls, such as Exchange RBAC/management scopes: https://learn.microsoft.com/en-us/exchange/understanding-management-role-scopes-exchange-2013-help

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful