Are subsites getting deprecated in SPO?

%3CLINGO-SUB%20id%3D%22lingo-sub-499803%22%20slang%3D%22en-US%22%3EAre%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-499803%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20subsites%20getting%20deprecated%20in%20SPO%3F%20With%20focus%20on%20hubsites%2C%20will%20MS%20keep%20subsites%20or%20remove%20them%3F%20Asking%20because%20I%20am%20creating%20a%20solution%20that%20uses%20subsites.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-499803%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-499879%22%20slang%3D%22en-US%22%3ERE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-499879%22%20slang%3D%22en-US%22%3ESubsites%20are%20%22deprecated%22%20in%20that%20they%20are%20not%20recommended%20by%20Microsoft.%20Subsites%20are%20difficult%20to%20manage%2C%20so%20it%20makes%20a%20bit%20of%20sense.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-500036%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-500036%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F130%22%20target%3D%22_blank%22%3E%40Trevor%20Seward%3C%2FA%3E%26nbsp%3Bfor%20the%20response!%20Yeah%20I%20was%20told%20this%20by%20a%20client%20today%20that%20it%20was%20deprecated%20and%20that%20put%20me%20on%20the%20back%20foot.%20Thank%20you%20for%20the%20confirmation%20that%20it%20is%20recommended%20not%20to%20use.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-500317%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-500317%22%20slang%3D%22en-US%22%3EWell%2C%20I%20would%20say%20that%20te%20recommendation%20is%20to%20go%20to%20a%20%22Flat%22%20architecture%20whenever%20is%20possible...deprecated%20has%20not%20been%20said%20yet%20by%20Microsoft%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1107982%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1107982%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20evidence%20that%20Microsoft%20are%20going%20to%20%E2%80%98actually%E2%80%99%20deprecate%20subsites%2C%20or%20is%20there%20an%20element%20of%20reading%20between%20the%20lines%20here%3F%20%26nbsp%3BI%20can%20see%20that%20hub%20sites%20have%20a%20roll%20to%20play%20as%20they%20offer%20valuable%20cross-site%20publishing%20which%20has%20been%20problematic%20in%20the%20past%2C%20but%20subsites%20offer%20site%20columns%2C%20metadata%20navigation%2C%20and%20permission%20inheritance.%20%26nbsp%3BAll%20the%20features%20of%20subsites%20have%20not%20be%20made%20available%20in%20other%20ways%20if%20you%20flatten%20the%20structure%20to%20use%20site%20collections%20alone..%20%26nbsp%3BAs%20an%20example%2C%20if%20you%20have%20a%20site%20collection%20for%20each%20and%20every%20project%20in%20an%20organisation%2C%20there%20is%20massive%20administration%20overhead%20compared%20to%20each%20project%20being%20a%20subsite%20of%20a%20%E2%80%98programme%E2%80%99%20site%20collection.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1107993%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1107993%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F518206%22%20target%3D%22_blank%22%3E%40MichM%3C%2FA%3E%26nbsp%3Bany%20classic%20feature%2C%20e.g.%20metadata%20navigation%2C%20is%20%22deprecated%22%20(hence%20being%20called%20'classic').%20Hub%20sites%20are%20adding%20permission-push%20down%20soon.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20remember%2C%20deprecated%20means%20%22may%20be%20removed%20in%20the%20future%2Fno%20new%20features%20being%20developed%22%20and%20not%20%22removed%22.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108327%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108327%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F130%22%20target%3D%22_blank%22%3E%40Trevor%20Seward%3C%2FA%3E%26nbsp%3BI%20was%20told%20by%20a%20Program%20Manager%20at%20Microsoft%20Ignite%20that%20there%20are%20no%20plans%20to%20get%20rid%20of%20subsites.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20are%20lots%20of%20use%20cases%20where%20subsites%20are%20mandatory.%26nbsp%3B%3CBR%20%2F%3EHere%20is%20one%3A%3C%2FP%3E%3CP%3E-%20Company%20wide%20site%20(communication%20site)%2C%20used%20for%20announcements%3C%2FP%3E%3CP%3E-%20Department%20sites%20(Team%20sites%20accessible%20only%20for%20team%20members)%3C%2FP%3E%3CP%3EGive%20me%20a%20solution%20to%20display%20department%20wide%20announcement%20in%20company%20wide%20site.%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20suggestion%3A%20Create%20subsites%20for%20each%20department.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20we%20go%20for%20flat%20structure%2C%20are%20we%20going%20to%20create%20two%20site%20collections%20for%20same%20department%3F%20Remember%2C%20there%20will%20be%20divisions%20in%20each%20department.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESubsites%20are%20%3CSTRONG%3EMANDATORY%3C%2FSTRONG%3E%20!!!!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108351%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108351%22%20slang%3D%22en-US%22%3EAgain%2C%20%22rid%20of%2Fremoval%22%20is%20not%20the%20same%20thing%20as%20%22deprecated%22%20or%20%22not%20recommended%22.%20Comm%20sites%20can't%20be%20subsites%2C%20for%20example.%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20yes%2C%20we%20approach%20it%20in%20the%20flat%20model%20where%20you'll%20have%20a%20public%20Comm%20site%20for%20xyz%20department%2Fdivision%2Fetc.%20and%20a%20Team%20site%20for%20the%20internal%20collaboration%20of%20that%20group.%20We%20then%20leverage%20hub%20sites%20to%20connect%20them%20as%20appropriate%2C%20which%20also%20has%20News%20rollup%20functionality.%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20also%20simplifies%20the%20permission%20story%20and%20should%20be%20less%20confusing%20to%20end%20users.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108394%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108394%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F130%22%20target%3D%22_blank%22%3E%40Trevor%20Seward%3C%2FA%3E%26nbsp%3B%3CEM%3EComm%20sites%20can%20%3CSTRIKE%3Enot%3C%2FSTRIKE%3E%20be%20subsites%3C%2FEM%3E%3C%2FP%3E%3CP%3EI%20have%20created%20Communication%20sites%20as%20subsites.%20(There%20is%20a%20way)%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20surprised%20on%20having%20public%20comm%20sites%20for%20each%20department%2C%20each%20division%2C%20each%20team%2C%20.......%20!!!!!%3C%2FP%3E%3CP%3ELet's%20assume%20the%20department%20IT.%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20will%20have%20minimum%205%20divisions%2C%20each%20division%20will%20have%20minimum%205%20team%20and%20each%20team%20will%20have%20minimum%205%20sub%20teams.%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20this%20case%2C%201%2B5x5x5%20%3D%20126%20public%20comm%20sites%20just%20for%20IT%20!!!!!%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsurprised_40x40.gif%22%20alt%3D%22%3Asuprised%3A%22%20title%3D%22%3Asuprised%3A%22%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%5BI'm%20poor%20in%20Mathematics%2C%20pardon%20me%20for%20any%20miscalculations%20%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fcry_40x40.gif%22%20alt%3D%22%3Acry%3A%22%20title%3D%22%3Acry%3A%22%20%2F%3E%5D%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108407%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108407%22%20slang%3D%22en-US%22%3EThere's%20a%20way%20via%20PnP%2C%20but%20you%20need%20to%20step%20back%20and%20think%20about%20why%20Microsoft%20chose%20not%20to%20put%20it%20in%20the%20UI%20--%20much%20like%20saving%20objects%20as%20templates.%20It%20isn't%20there%20for%20a%20reason.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20have%20to%20ask%2C%20why%20are%20you%20concerned%20about%20the%20number%20of%20sites%20in%20your%20tenant%3F%20Given%20you'll%20likely%20never%20come%20close%20to%20the%20limit...%3CBR%20%2F%3E%3CBR%20%2F%3EAgain%2C%20this%20is%20a%20re-do%20of%20information%20architecture.%20Subsites%20have%20always%20been%20poor%20IA%2C%20confusing%20where%20permissions%20were%20applied%20at%2C%20etc.%20A%20flat%20architecture%20aims%20to%20resolve%20these%20issues.%20You%20might%20even%20re-think%20why%20you're%20needing%20to%20create%20a%20public%20site%20per%20team%20--%20could%20they%20just%20have%20their%20own%20pages%20on%20a%20single%20site%20with%20appropriate%20access%20controls%3F%20Again%2C%20it's%20about%20rethinking%20IA.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20use%20Azure%20Workspaces%20to%20also%20control%20access%20across%20a%20broad%20number%20of%20sites%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanage-apps%2Faccess-panel-workspaces%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fmanage-apps%2Faccess-panel-workspaces%3C%2FA%3E)%20--%20self-service%2C%20even.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108877%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108877%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F130%22%20target%3D%22_blank%22%3E%40Trevor%20Seward%3C%2FA%3E%26nbsp%3BBased%20on%20your%20responses%20I%20see%20that%20you%20are%20worried%20about%20permissions.%20Unfortunately%20we%20did%20not%20find%20any%20issues%20with%20that.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAzure%20!%3F%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20are%20organizations%20where%20SharePoint%20Admins%20do%20not%20have%20access%20to%20such%20level.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Funamused_40x40.gif%22%20alt%3D%22%3Aunamused%3A%22%20title%3D%22%3Aunamused%3A%22%20%2F%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20site%20for%20every%20team!%3F%26nbsp%3B%3C%2FP%3E%3CP%3ESorry!%20Each%20team%20produces%20more%20content.%20They%20need%20own%20space%20to%20publish%20their%20articles.%20It%20will%20be%20cumbersome%20if%20we%20provide%20one%20site%20for%20all.%20(No%2C%20No%20for%20item%20level%20permission.%20not%20at%20all)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlready%20users%20are%20thinking%20to%20move%20their%20content%20to%20CONFLUENCE%20because%20of%20classic%20SharePoint.%26nbsp%3B%3C%2FP%3E%3CP%3EWe(IT)%20got%20great%20relief%20after%20seeing%20Modern%20site%20features.%20Users%20are%20liking%20it.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20request%20Microsoft%2C%20not%20to%20deprecate%20subsites.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20they%20even%20promised%20that%20%3CSTRONG%3Emetadata%20navigation%3C%2FSTRONG%3E%20is%20coming%20to%20modern%20sites%20but%20you%20are%20claiming%20that%20it%20will%20be%20deprecated%20!!!!!%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fcry_40x40.gif%22%20alt%3D%22%3Acry%3A%22%20title%3D%22%3Acry%3A%22%20%2F%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFingers%20crossed%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Funamused_40x40.gif%22%20alt%3D%22%3Aunamused%3A%22%20title%3D%22%3Aunamused%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1108897%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Are%20subsites%20getting%20deprecated%20in%20SPO%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1108897%22%20slang%3D%22en-US%22%3ESubsites%20aren't%20the%20preferred%20IA%20at%20this%20point.%20You're%20welcome%20to%20argue%20until%20you're%20blue%20in%20the%20face%2C%20of%20course.%3CBR%20%2F%3E%3CBR%20%2F%3EAzure%20access%20can%20be%20delegated%20--%20Azure%20has%20very%20fine%20grained%20roles%2C%20fortunately.%3C%2FLINGO-BODY%3E
New Contributor

Are subsites getting deprecated in SPO? With focus on hubsites, will MS keep subsites or remove them? Asking because I am creating a solution that uses subsites.

11 Replies
Subsites are "deprecated" in that they are not recommended by Microsoft. Subsites are difficult to manage, so it makes a bit of sense.

Thank you @Trevor Seward for the response! Yeah I was told this by a client today that it was deprecated and that put me on the back foot. Thank you for the confirmation that it is recommended not to use.

Well, I would say that te recommendation is to go to a "Flat" architecture whenever is possible...deprecated has not been said yet by Microsoft

Is there any evidence that Microsoft are going to ‘actually’ deprecate subsites, or is there an element of reading between the lines here?  I can see that hub sites have a roll to play as they offer valuable cross-site publishing which has been problematic in the past, but subsites offer site columns, metadata navigation, and permission inheritance.  All the features of subsites have not be made available in other ways if you flatten the structure to use site collections alone..  As an example, if you have a site collection for each and every project in an organisation, there is massive administration overhead compared to each project being a subsite of a ‘programme’ site collection.

@MichM any classic feature, e.g. metadata navigation, is "deprecated" (hence being called 'classic'). Hub sites are adding permission-push down soon.

 

And remember, deprecated means "may be removed in the future/no new features being developed" and not "removed".

@Trevor Seward I was told by a Program Manager at Microsoft Ignite that there are no plans to get rid of subsites. 

 

There are lots of use cases where subsites are mandatory. 
Here is one:

- Company wide site (communication site), used for announcements

- Department sites (Team sites accessible only for team members)

Give me a solution to display department wide announcement in company wide site. 

My suggestion: Create subsites for each department. 

 

If we go for flat structure, are we going to create two site collections for same department? Remember, there will be divisions in each department. 

 

Subsites are MANDATORY !!!!!

Again, "rid of/removal" is not the same thing as "deprecated" or "not recommended". Comm sites can't be subsites, for example.

But yes, we approach it in the flat model where you'll have a public Comm site for xyz department/division/etc. and a Team site for the internal collaboration of that group. We then leverage hub sites to connect them as appropriate, which also has News rollup functionality.

This also simplifies the permission story and should be less confusing to end users.

@Trevor Seward Comm sites can not be subsites

I have created Communication sites as subsites. (There is a way) :smile:

 

I'm surprised on having public comm sites for each department, each division, each team, ....... !!!!!

Let's assume the department IT. 

It will have minimum 5 divisions, each division will have minimum 5 team and each team will have minimum 5 sub teams. 

In this case, 1+5x5x5 = 126 public comm sites just for IT !!!!! :suprised:

[I'm poor in Mathematics, pardon me for any miscalculations :cry:]

There's a way via PnP, but you need to step back and think about why Microsoft chose not to put it in the UI -- much like saving objects as templates. It isn't there for a reason.

I have to ask, why are you concerned about the number of sites in your tenant? Given you'll likely never come close to the limit...

Again, this is a re-do of information architecture. Subsites have always been poor IA, confusing where permissions were applied at, etc. A flat architecture aims to resolve these issues. You might even re-think why you're needing to create a public site per team -- could they just have their own pages on a single site with appropriate access controls? Again, it's about rethinking IA.

You can use Azure Workspaces to also control access across a broad number of sites (https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/access-panel-workspaces) -- self-service, even.

@Trevor Seward Based on your responses I see that you are worried about permissions. Unfortunately we did not find any issues with that. :smile:

 

Azure !? 

There are organizations where SharePoint Admins do not have access to such level. :unamused:

 

One site for every team!? 

Sorry! Each team produces more content. They need own space to publish their articles. It will be cumbersome if we provide one site for all. (No, No for item level permission. not at all)

 

Already users are thinking to move their content to CONFLUENCE because of classic SharePoint. 

We(IT) got great relief after seeing Modern site features. Users are liking it. 

I request Microsoft, not to deprecate subsites. 

 

And they even promised that metadata navigation is coming to modern sites but you are claiming that it will be deprecated !!!!! :cry: 

Fingers crossed :unamused:

Subsites aren't the preferred IA at this point. You're welcome to argue until you're blue in the face, of course.

Azure access can be delegated -- Azure has very fine grained roles, fortunately.