Hallelujah! Azure AD delegated application management roles are in public preview!

Today is a big day. We're just so happy to announce the public preview of our new delegated app management roles. If you have granted people the Global Administrator role for things like configuring enterprise applications, you can now move them to this lesser privileged role. Doing so will help improve your security posture and reduce the potential for unfortunate mistakes.

Additionally, we’re adding support for per-application ownership, which allows you to grant full management permissions on a per-application basis.

Read more about it in the Enterprise Mobility + Security blog.