Home

Multiple Office 365 Tenancies under Single Organisation

%3CLINGO-SUB%20id%3D%22lingo-sub-764851%22%20slang%3D%22en-US%22%3EMultiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-764851%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20currently%20in%20discussions%20with%20my%20business%20unit%20relating%20to%20the%20option%20to%20have%20multiple%20tenancies%20within%20the%20same%20organisation.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20set%20the%20scene%20-%20We%20are%20a%20global%20organisation%20with%20one%20O365%20tenancy.%20Our%20tenancy%20resides%20in%20Japan%20(as%20that%20is%20where%20global%20HQ%20is)%20under%20one%20organisation.%20Full%20admin%20portal%20access%20is%20also%20controlled%20by%20Japan.%20This%20means%20that%20all%20other%20regions%20have%20very%20limited%20admin%20privileges%20for%20O365%20which%20is%20a%20massive%20pain.%20Before%20you%20ask%2C%20no%20global%20HQ%20will%20not%20share%20full%20admin%20rights%20with%20anyone%20else.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Europe%2C%20we%20are%20exploring%20the%20possibility%20of%20creating%20a%20separate%20tenancy%20but%20under%20the%20same%20organisational%20domain.%20The%20research%20I%20have%20done%20so%20far%20indicates%20that%20this%20cant%20be%20done%2C%20as%20well%20as%20other%20factors%20that%20would%20equate%20to%20a%20negative%20impact%20on%20user%20experience.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20just%20like%20to%20get%20some%20guidance%2Ffeedback%20on%20this%20subject%20from%20anyone%20who%20knows%2C%20or%20has%20been%20through%20similar.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-765131%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-765131%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20always%20best%20to%20keep%20all%20users%20within%20the%20same%20organization%2C%20as%20otherwise%20collaboration%20will%20greatly%20suffer.%20If%20administration%20is%20your%20major%20point%2C%20you%20can%20either%20wait%20until%20Microsoft%20provides%20proper%20RBAC%20support%20across%20all%20workloads%20(probably%20in%20few%20years...)%20or%20build%20your%20own%20management%20tools%20on%20top%20of%20what's%20currently%20available%20or%20use%20third-party%20products%20that%20provide%20management%20software%20for%20O365%20(they%20can%20usually%20allow%20you%20to%20define%20granular%20controls%20for%20the%20tasks%20each%20admin%20can%20perform%20against%20a%20given%20group%20of%20user).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-767664%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-767664%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20for%20your%20response%20Vasil.%20Yes%20I%20definitely%20wish%20to%20keep%20all%20users%20within%20the%20same%20organisation%20(so%20that%20they%20all%20share%20the%20same%20domain).%20However%2C%20within%20the%20same%20organisation%20I%20want%20a%20way%20to%20manage%20European%20users%20independently%20from%20other%20regions%20yet%20still%20retain%20the%20benefits%20of%20cross-collaboration.%20And%20I%20think%20this%20is%20where%20the%20problem%20lies.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20I%20understand%20it%20(and%20I%20could%20be%20totally%20wrong)%2C%20Azure%20allows%20you%20to%20have%20multiple%20tenancies%20within%20the%20same%20organisation.%20But%20I'm%20not%20sure%20how%20this%20works%20for%20cross-collaboration.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20think%20'multi-geo'%20would%20solve%20this%20problem%2C%20as%20this%20only%20deals%20with%20%3CEM%3Ewhere%3C%2FEM%3Ethe%20data%20is%20at%20rest.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERe%3A%20third-party%20products%20for%20O365%20management%20-%20Could%20you%20provide%20any%20examples%20please%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20again%20for%20your%20feedback.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-767909%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-767909%22%20slang%3D%22en-US%22%3E%3CP%3EOffice%20365%20!%3D%20Azure%2C%20so%20you%20have%20no%20parity%20in%20the%20management%20tools%20either.%20Best%20you%20can%20do%20with%20the%20native%20O365%20functionality%20is%20to%20segregate%20Exchange%20Online%20management%2C%20as%20it%20has%20proper%20support%20for%20RBAC%20controls.%20All%20the%20other%20workloads%20are%20quite%20limited%20in%20this%20regard%2C%20most%20importantly%20the%20underlying%20Azure%20AD%20where%20all%20identity%20and%20auth%20management%20happens%20doesn't%20have%20any%20usable%20RBAC%20controls%20yet%20(it%20has%20the%20so-called%20Administrative%20units%2C%20but%20they%20are%20very%20very%20limited).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20for%20third-party%20tools%2C%20there%20are%20few%20players%20in%20the%20space.%20I%20try%20to%20avoid%20posting%20direct%20links%20to%20third-party%20products%20where%20possible%2C%20just%20do%20a%20search%20online%20and%20you%20will%20find%20them.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-768519%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-768519%22%20slang%3D%22en-US%22%3EThanks%20again%20Vasil.%20Very%20informative.%20I%20am%20having%20some%20other%20conversations%20with%20peers%20about%20this%20subject%20and%20will%20post%20the%20findings%20for%20the%20benefit%20of%20those%20in%20a%20similar%20position.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-773821%22%20slang%3D%22en-US%22%3ERe%3A%20Multiple%20Office%20365%20Tenancies%20under%20Single%20Organisation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-773821%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F379070%22%20target%3D%22_blank%22%3E%40PMGlobal%3C%2FA%3E%26nbsp%3BHello!%20You've%20posted%20your%20question%20in%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FCommunity-Discussion%2Fbd-p%2FCommunityQuestions%22%20target%3D%22_blank%22%3ECommunity%20Discussion%20space%3C%2FA%3E%2C%20which%20is%20intended%20for%20discussion%20around%20the%20Tech%20Community%20website%20itself%2C%20not%20product%20questions.%20While%20I'm%20pleased%20you%20got%20a%20great%20answer%2C%20I'm%20moving%20your%20question%20to%20the%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FOffice-365%2Fct-p%2FOffice365%22%20target%3D%22_self%22%3EOffice%20365%20space%3C%2FA%3E-%20please%20post%20Office%20365%20questions%20here%20in%20the%20future.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
PMGlobal
Occasional Contributor

I am currently in discussions with my business unit relating to the option to have multiple tenancies within the same organisation.

 

To set the scene - We are a global organisation with one O365 tenancy. Our tenancy resides in Japan (as that is where global HQ is) under one organisation. Full admin portal access is also controlled by Japan. This means that all other regions have very limited admin privileges for O365 which is a massive pain. Before you ask, no global HQ will not share full admin rights with anyone else.

 

In Europe, we are exploring the possibility of creating a separate tenancy but under the same organisational domain. The research I have done so far indicates that this cant be done, as well as other factors that would equate to a negative impact on user experience.

 

I would just like to get some guidance/feedback on this subject from anyone who knows, or has been through similar.

 

Thank you!

 

5 Replies

It's always best to keep all users within the same organization, as otherwise collaboration will greatly suffer. If administration is your major point, you can either wait until Microsoft provides proper RBAC support across all workloads (probably in few years...) or build your own management tools on top of what's currently available or use third-party products that provide management software for O365 (they can usually allow you to define granular controls for the tasks each admin can perform against a given group of user).

@Vasil Michev 

 

Many thanks for your response Vasil. Yes I definitely wish to keep all users within the same organisation (so that they all share the same domain). However, within the same organisation I want a way to manage European users independently from other regions yet still retain the benefits of cross-collaboration. And I think this is where the problem lies.

 

As I understand it (and I could be totally wrong), Azure allows you to have multiple tenancies within the same organisation. But I'm not sure how this works for cross-collaboration. 

 

I don't think 'multi-geo' would solve this problem, as this only deals with where the data is at rest.

 

Re: third-party products for O365 management - Could you provide any examples please?

 

Many thanks again for your feedback.

Office 365 != Azure, so you have no parity in the management tools either. Best you can do with the native O365 functionality is to segregate Exchange Online management, as it has proper support for RBAC controls. All the other workloads are quite limited in this regard, most importantly the underlying Azure AD where all identity and auth management happens doesn't have any usable RBAC controls yet (it has the so-called Administrative units, but they are very very limited).

 

As for third-party tools, there are few players in the space. I try to avoid posting direct links to third-party products where possible, just do a search online and you will find them.

Thanks again Vasil. Very informative. I am having some other conversations with peers about this subject and will post the findings for the benefit of those in a similar position.

@PMGlobal Hello! You've posted your question in the Community Discussion space, which is intended for discussion around the Tech Community website itself, not product questions. While I'm pleased you got a great answer, I'm moving your question to the Office 365 space - please post Office 365 questions here in the future. 

Related Conversations
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
2 Replies
Early preview of Microsoft Edge group policies
Sean Lyndersay in Discussions on
65 Replies
*Updated 9/3* Syncing in Microsoft Edge Preview Channels
Elliot Kirk in Articles on
205 Replies