Forum Discussion
azkerm
Oct 07, 2024Copper Contributor
Limiting admins to specific domains and licenses quantities
Hi There,
I have a tenant with only one domain at the moment which is of the main organization. I'm planning three more domains and each of these additional domains belong to a company who are subsidiaries of the main company. I am aware adding domains won't be an issue but however my question is as below;
Can I create custom admins with each of them tied/limited managing, creating and updating users specific to the given domain(s) including the limiting of licenses (e.g.: admin B can only create up to 50 users under domain B).
So that, as a main admin, I can oversee and control the domains, licenses and users.
- There is limited support for such "tenant segregation" scenarios in M365. You can limit some of the admin tasks by scoping them to Administrative units (https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units), but you cannot create "license pools" and such. For that, you either need to build your own license management tool, or leverage some of the third-party products that offer such.
- There is limited support for such "tenant segregation" scenarios in M365. You can limit some of the admin tasks by scoping them to Administrative units (https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units), but you cannot create "license pools" and such. For that, you either need to build your own license management tool, or leverage some of the third-party products that offer such.
- azkermCopper ContributorThank you for the response. I guess we're left off with scoping the roles or using a 3rd party service using APIs to control.