SOLVED

2 companies in 1 tenant

%3CLINGO-SUB%20id%3D%22lingo-sub-1701044%22%20slang%3D%22en-US%22%3E2%20companies%20in%201%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1701044%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EI%20want%20to%20manage%202%20companies%20under%20one%20tenant.%20What%20are%20the%20seperation%20options%20in%20MS365%20for%20a%20good%20and%20clear%20overview.%20I%20want%20to%20seperate%20as%20much%20as%20possible.%20Anyone%20got%20an%20advise%3F%20It%20must%20meet%20the%20german%20law%20requirements.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1701044%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1703433%22%20slang%3D%22en-US%22%3ERe%3A%202%20companies%20in%201%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1703433%22%20slang%3D%22en-US%22%3E%3CP%3ETL%3BDR%20answer%20is%20-%20they%20are%20very%20limited.%20Some%20workloads%2C%20such%20as%20Exchange%2C%20can%20be%20configured%20with%20proper%20separation.%20Most%20of%20the%20others%20cannot.%20Most%20of%20the%20admin%20endpoints%20cannot.%20So%20a%20user%20with%20an%20admin%20role%20will%20be%20able%20to%20perform%20actions%20across%20both%20companies.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAdministrative%20units%20is%20the%20current%20%22suite-wide%22%20solution.%20Which%20is%20not%20really%20suite-wide.%20Or%20a%20solution.%20Still%2C%20it's%20the%20only%20built-in%20functionality%20we%20currently%20have%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.quadrotech-it.com%2Fblog%2Fworking-with-administrative-units-in-the-office-365-admin-center%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.quadrotech-it.com%2Fblog%2Fworking-with-administrative-units-in-the-office-365-admin-center%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20that%20works%20for%20you%2C%20great.%20If%20not%2C%20you%20can%20either%20wait%20for%20Microsoft%20to%20deliver%20the%20long-promised%20suite-wide%20RBAC%20controls%20(in%20a%20year%20or%20two)%2C%20or%20use%20third-part%20management%20products%20that%20basically%20replace%20the%20admin%20endpoints.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1706650%22%20slang%3D%22en-US%22%3ERe%3A%202%20companies%20in%201%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1706650%22%20slang%3D%22en-US%22%3EThanks!%20Do%20you%20have%20any%20recomendations%20for%20a%20third-party%20management%20product%3F%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I want to manage 2 companies under one tenant. What are the seperation options in MS365 for a good and clear overview. I want to seperate as much as possible. Anyone got an advise? It must meet the german law requirements.

3 Replies
Highlighted
Best Response confirmed by TexGrit (New Contributor)
Solution

TL;DR answer is - they are very limited. Some workloads, such as Exchange, can be configured with proper separation. Most of the others cannot. Most of the admin endpoints cannot. So a user with an admin role will be able to perform actions across both companies.

 

Administrative units is the current "suite-wide" solution. Which is not really suite-wide. Or a solution. Still, it's the only built-in functionality we currently have: https://www.quadrotech-it.com/blog/working-with-administrative-units-in-the-office-365-admin-center/

 

If that works for you, great. If not, you can either wait for Microsoft to deliver the long-promised suite-wide RBAC controls (in a year or two), or use third-part management products that basically replace the admin endpoints.

Highlighted
Thanks! Do you have any recomendations for a third-party management product?
Highlighted

I do, but we try to keep these forums free of advertisement :) Just look them up online.