In situations where you are working with a Microsoft partner, you can assign the partner admin roles as needed. However, when you do this, the partner can in turn assign other users within your organization or even within its own organization admin roles. While this may seem scary on the surface, there may be times when this is needed. For example, if your partner is setting up or managing Office 365 for your organization, this may be a necessity. It's important to note that partners can assign both full and limited administration roles. Full administration privileges are the equivalent to a global admin while limited administration privileges are the equivalent of help desk or password admin. Full administration privileges are the equivalent to a global admin while limited administration privileges are the equivalent to a help desk or password admin. It's also important to note that before a partner can assign these kinds of roles, you need to first add the partner as a delegated admin to your organization's Office 365 account.

To facilitate the admin delegation for a partner, the partner first sends you an email to confirm that you wish to give them permission to act as a delegated admin. Only after you've authorized them to do so can a partner perform these functions.