We're an MSP with a customer in France. They have a single Azure tenant with offices around the world. Is their a way we can have GDAP access to the tenant, but only be granted permission to administer, (Intune/Defender etc) users & devices in the UK? The customer has other MSPs in other countries who will have the same issue. Thanks!