Our organization is looking for a way to delegate updating and managing User Profile pictures in O365 to our HR department. We are a Hybrid org, so we do have an on prem exchange server and AD Connect running. We'd like to delegate control of the user profile pictures, without giving HR global admin rights to our tenant. We have updated the OWAMailboxPolicy to disallow regular users from updating their pictures themselves.
What options are out there for this? and has anyone found a good way to do it?