No, at least not across the entirety of O365. Best you can do currently is use Administrative units: https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units
They have quite few limitations though, so it depends on what actions exactly you need to do/restrict. And they're not supported by all workloads. So you might as well examine some workload-specific controls, such as Exchange RBAC/management scopes: https://learn.microsoft.com/en-us/exchange/understanding-management-role-scopes-exchange-2013-help
split administrative rights at Domain level in office365
Ajaz Khan
266
Reputation points
Hi Team,
We have a requirement to create admin roles on domain level in office 365. We have multiple domains in office 365 and wish if we could create admin accounts who can manage only specific domains in the single O365 tenant. is it possible? if not what would be the best possible approach.
Accepted answer
-
Vasil Michev 100.2K Reputation points MVP
2021-04-28T12:28:59.06+00:00