Delegated administration FAQ


Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft Defender portal trials hub. Learn about who can sign up and trial terms here.

This article provides frequently asked questions and answers about delegated administration tasks in Microsoft 365 for Microsoft partners and resellers. Delegated administration includes the ability to manage Exchange Online Protection (EOP) settings for other tenants (companies).

I'm a reseller and I need to manage my customer tenants. How does this work?

If you're a Microsoft partner or reseller, and you've signed up to be a Microsoft Cloud Solution Provider (CSP), you can request delegated administration capabilities in your customer's Microsoft 365 organization. For more information, see the following articles:

I'm a customer, not a reseller. How can I set up delegated administrator for my subtenants?

Delegated administration is only available for resellers and partners. However, there's a sample PowerShell script to help you apply policies to your subtenants (companies). For more information, see Sample script for applying EOP settings to multiple tenants.

Can I prevent my subtenant admin from modifying my policy?

No. Microsoft 365 doesn't currently have this capability.

Can I get consolidated reporting across all of my subtenants?

Consolidated reporting across the companies you manage isn't available in Microsoft 365 admin center reports. However, you can get reports by using Microsoft Graph.