Admin roles with scope for single group

[best79]

Hi.

I am relatively new to Office365 / Microsoft365.

We are evaluating if we can use O365 for our multi-site church.

What I want to know is, if it is possible to add a Admin with "user administrator"-role but he/she shall only see and manage users of one of our sites.

We could organize the users of a site for example in a O365-group or any other unit, that works. Background of the question is: I want to have one admin per church site who is managing "his/her users" at the site. I am "overall admin" and can support, if they need it.

I hope you understood, what I mean.

Is there any possibility, to do this?

Regards

Benjamin

[#2]

To an extent, yes, via the so-called administrative units: https://docs.microsoft.com/en-us/powershell/azure/active-directory/working-with-administrative-units...

They are however very limited in functionality, so they might not be a good match for all scenarios. It really depends on what kind of admin tasks you want to delegate.

[#3]

Is it not enough with and Admin / Owner role on a per site basics?

[#4]

@Vasil Michev I tried your hint, but I fail - the cmdlet New-AzureADAdministrativeUnit was not found. Do I have to install this on my powershell? How?

Thank you for any help.

Regards

Benjamin

[#5]

Yeah, but how can I create a site unit?

[#6]

You need the Azure AD Preview module, AzureADPreview.

Or you can also use the good old MSOL module: https://www.quadrotech-it.com/blog/working-with-administrative-units-in-the-office-365-admin-center/