Delegation Model

%3CLINGO-SUB%20id%3D%22lingo-sub-197322%22%20slang%3D%22en-US%22%3EDelegation%20Model%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-197322%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20interested%20to%20know%20about%20the%20Delegation%20Model%20for%20various%20of%20Office%20365%20online%20services%20in%20conjunction%20with%20Azure%20Active%20Directory.%3C%2FP%3E%0A%3CP%3EThe%26nbsp%3Bright%20assignment%20management%20is%20always%20a%20pain%20since%20every%20product%20has%20a%20different%20delegation%20model.%20We%20are%20looking%20to%20restrict%20and%20give%20only%20the%20necessary%26nbsp%3Bpermission%26nbsp%3Bfor%20Help%20Desk%20and%20Administrators%20without%20giving%20Global%20Admin%20right.%3C%2FP%3E%0A%3CP%3EThanks%20You!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-203266%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Delegation%20Model%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-203266%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20Peter%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20seen%20that%20document.%20A%20follow-up%20question%2C%20we%20have%20now%20Office%20365%20admin%20roles%20and%20Azure%20AD%20admin%20roles.%3C%2FP%3E%0A%3CP%3EWhich%20one%20should%20I%20use%20to%20create%20my%20delegation%20model.%20Some%20admin%20roles%20overlap%20between%20the%20two.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EFor%20example%2C%20if%20a%20user%20is%20assigned%20an%20admin%20role%20in%20Azure%20AD%2C%20this%20user%20will%20have%20the%20same%20permissions%20across%20all%20of%20the%20cloud%20services%20that%20the%20company%20has%20subscribed%20to%2C%20regardless%20of%20whether%20you%20assign%20the%20role%20in%20the%20Office%20365%20admin%20center%2C%20or%20in%20the%20Azure%20portal%2C%20or%20by%20using%20the%20Azure%20AD%20module%20for%20Windows%20PowerShell.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EShould%20I%20use%20Office%20365%20to%20assign%20admin%20roles%20including%20Exchange%2C%20SharePoint%2C%20Skype%20for%20Business.%20Or%20Azure%20AD%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EA%3CSPAN%3Eny%20best%20practice%20here%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThank%20You!%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-197603%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Delegation%20Model%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-197603%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fabout-office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fabout-office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-197602%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Delegation%20Model%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-197602%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20Steve%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECould%20you%20please%20share%20more%20details%20or%20point%20me%20to%20a%20deep%20dive%20resource(s)%20for%26nbsp%3B%3CSPAN%3Eenabling%20admins%20to%20delegate%20specific%20(limited)%20administrative%20tasks%26nbsp%3Bfor%20different%20Office%20365%26nbsp%3Bworkloads%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThanks!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-197355%22%20slang%3D%22en-US%22%3ERE%3A%20Delegation%20Model%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-197355%22%20slang%3D%22en-US%22%3EHi%20Charbel%2C%20privileged%20access%20management%20in%20Office%20365%20helps%20with%20this%20by%20enabling%20admins%20to%20delegate%20specific%20administrative%20tasks%20within%20office%20workloads.%20Azure%20AD%20also%20has%20plans%20to%20enable%20more%20granular%20control%20and%20delegation%20in%20the%20near%20future.%3C%2FLINGO-BODY%3E
Highlighted
CHARBEL NEMNOM
Occasional Contributor

We are interested to know about the Delegation Model for various of Office 365 online services in conjunction with Azure Active Directory.

The right assignment management is always a pain since every product has a different delegation model. We are looking to restrict and give only the necessary permission for Help Desk and Administrators without giving Global Admin right.

Thanks You!

4 Replies
Hi Charbel, privileged access management in Office 365 helps with this by enabling admins to delegate specific administrative tasks within office workloads. Azure AD also has plans to enable more granular control and delegation in the near future.

Thank you Steve,

 

Could you please share more details or point me to a deep dive resource(s) for enabling admins to delegate specific (limited) administrative tasks for different Office 365 workloads?

 

Thanks!

Thank you Peter,

 

I have seen that document. A follow-up question, we have now Office 365 admin roles and Azure AD admin roles.

Which one should I use to create my delegation model. Some admin roles overlap between the two.

 

For example, if a user is assigned an admin role in Azure AD, this user will have the same permissions across all of the cloud services that the company has subscribed to, regardless of whether you assign the role in the Office 365 admin center, or in the Azure portal, or by using the Azure AD module for Windows PowerShell.

 

Should I use Office 365 to assign admin roles including Exchange, SharePoint, Skype for Business. Or Azure AD?

 

Any best practice here?

 

Thank You!

 

 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
16 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
cntvertex in Discussions on
11 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies