Administration Exchange local admins

[cf_2020]

Hello,

we have about 1500 users with O365 and we are moving now all on prem users from exchange 2010 to O365 (E3). We also have the geo location option for europe.

Q: We have a global Exchange admin account. But we need to define local exchange administrators for each country enabling the admin to create, delete exchange users for his region. Like 1 exchange admin for UK, 1 exchange admin for Germany etc. How can we set up roles? users? for this purpose. Thanks!  

[#2]

Hello@cf_2020 ! 

I dont think this is possible. 

There is a Geo-Administrator "role" that gives users administrator access of a certain geo location. But this role is only applicable for OneDrive and SharePoint. 

I believe that Exchange is not able to be managed in this kind of behavior. 

Your best bet would be to perhaps set up management scopes for each geo location and then add the admins to those scopes. 
This would in theory make it possible for them to only manage their locations users. 

Let me know if you need further assistance

Kind Regards
Oliwer Sjöberg

[#3]

Depends on what exactly you want. Technically speaking, creating new mailboxes in O365 is done by assigning a license, which is an Azure AD operation. Thus you need the corresponding Azure AD/Office 365 admin role, and those are challenging to scope down to a subset of users. Best you can do in this regard is use Administrative units: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-administrative-...

AUs are quite limited though, so don't expect wonders. Now, it you only want to delegate Exchange-related tasks (sans provisioning user mailboxes), you can do just fine as Exchange Online's RBAC model is very robust and you can create custom management scopes limited to a particular country or department. Pretty much the same procedures as with on-premises server apply.