Home

Admin roles with scope for single group

%3CLINGO-SUB%20id%3D%22lingo-sub-1284715%22%20slang%3D%22de-DE%22%3EAdmin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1284715%22%20slang%3D%22de-DE%22%3E%3CP%3EHi.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20relatively%20new%20to%20Office365%20%2F%20Microsoft365.%3C%2FP%3E%3CP%3EWe%20are%20evaluating%20if%20we%20can%20use%20O365%20for%20our%20multi-site%20church.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20want%20to%20know%20is%2C%20if%20it%20is%20possible%20to%20add%20an%20admin%20with%20%22user%20administrator%22-role%20but%20he%2Fshe%20shall%20only%20see%20and%20manage%20users%20of%20one%20of%20our%20sites.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20could%20organize%20the%20users%20of%20a%20site%20for%20example%20in%20an%20O365-group%20or%20any%20other%20unit%2C%20that%20works.%20Background%20of%20the%20question%20is%3A%20I%20want%20to%20have%20one%20admin%20per%20church%20site%20who%20is%20managing%20%22his%2Fher%20users%22%20at%20the%20site.%20I%20am%20%22overall%20admin%22%20and%20can%20support%2C%20if%20they%20need%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20hope%20you%20understood%2C%20what%20I%20mean.%3C%2FP%3E%3CP%3EIs%20there%20any%20possibility%2C%20to%20do%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EBenjamin%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1284715%22%20slang%3D%22de-DE%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1285411%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1285411%22%20slang%3D%22en-US%22%3E%3CP%3ETo%20an%20extent%2C%20yes%2C%20via%20the%20so-called%20administrative%20units%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fazure%2Factive-directory%2Fworking-with-administrative-units%3Fview%3Dazureadps-2.0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fazure%2Factive-directory%2Fworking-with-administrative-units%3Fview%3Dazureadps-2.0%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThey%20are%20however%20very%20limited%20in%20functionality%2C%20so%20they%20might%20not%20be%20a%20good%20match%20for%20all%20scenarios.%20It%20really%20depends%20on%20what%20kind%20of%20admin%20tasks%20you%20want%20to%20delegate.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1286203%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1286203%22%20slang%3D%22en-US%22%3EIs%20it%20not%20enough%20with%20and%20Admin%20%2F%20Owner%20role%20on%20a%20per%20site%20basics%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1286572%22%20slang%3D%22de-DE%22%3ERe%3A%20Admin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1286572%22%20slang%3D%22de-DE%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20tried%20your%20hint%2C%20but%20I%20fail%20-%20the%20cmdlet%20New-AzureADAdministrativeUnit%20was%20not%20found.%20Do%20I%20have%20to%20install%20this%20on%20my%20powershell%3F%20How%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20any%20help.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EBenjamin%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1286575%22%20slang%3D%22de-DE%22%3ERe%3A%20Admin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1286575%22%20slang%3D%22de-DE%22%3EYeah%2C%20but%20how%20can%20I%20create%20a%20site%20unit%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1287514%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20roles%20with%20scope%20for%20single%20group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1287514%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20need%20the%20Azure%20AD%20Preview%20module%2C%26nbsp%3B%3CU%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%20color%3D%22%230b0117%22%3EAzureADPreview%3C%2FFONT%3E%3C%2FU%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOr%20you%20can%20also%20use%20the%20good%20old%20MSOL%20module%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.quadrotech-it.com%2Fblog%2Fworking-with-administrative-units-in-the-office-365-admin-center%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.quadrotech-it.com%2Fblog%2Fworking-with-administrative-units-in-the-office-365-admin-center%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi.

 

I am relatively new to Office365 / Microsoft365.

We are evaluating if we can use O365 for our multi-site church.

 

What I want to know is, if it is possible to add a Admin with "user administrator"-role but he/she shall only see and manage users of one of our sites.

 

We could organize the users of a site for example in a O365-group or any other unit, that works. Background of the question is: I want to have one admin per church site who is managing "his/her users" at the site. I am "overall admin" and can support, if they need it.

 

I hope you understood, what I mean.

Is there any possibility, to do this?

 

Regards

Benjamin

5 Replies
Highlighted

To an extent, yes, via the so-called administrative units: https://docs.microsoft.com/en-us/powershell/azure/active-directory/working-with-administrative-units...

 

They are however very limited in functionality, so they might not be a good match for all scenarios. It really depends on what kind of admin tasks you want to delegate.

Highlighted
Is it not enough with and Admin / Owner role on a per site basics?
Highlighted

@Vasil Michev I tried your hint, but I fail - the cmdlet New-AzureADAdministrativeUnit was not found. Do I have to install this on my powershell? How?

 

Thank you for any help.

 

Regards

Benjamin

Highlighted
Yeah, but how can I create a site unit?
Highlighted

You need the Azure AD Preview module, AzureADPreview.

 

Or you can also use the good old MSOL module: https://www.quadrotech-it.com/blog/working-with-administrative-units-in-the-office-365-admin-center/