Delegating Admin for Partners
Start course

This Managing Azure AD User Roles course will teach you how to plan user roles in Microsoft 365 and how to allocate roles in workloads. You will learn how to configure administrative accounts and how to configure RBAC within Azure AD. You'll also learn how to delegate and manage admin roles.

Later in the course, you will learn how to manage role allocations by using Azure AD and how to plan security and compliance roles for Microsoft 365.

Learning Objectives

  • Plan and Allocate User Roles
  • Configure Role-Based Access (RBAC)
  • Delegate and Manage Admin Access
  • Plan Security and Compliance Roles

Intended Audience

  • IT professionals who are interested in obtaining Microsoft 365 certification
  • Those tasked with configuring and managing Office 365 access


  • A moderate understanding of Microsoft 365 and of Azure AD

In situations where you are working with a Microsoft partner, you can assign the partner admin roles as needed. However, when you do this, the partner can in turn assign other users within your organization or even within its own organization admin roles. While this may seem scary on the surface, there may be times when this is needed. For example, if your partner is setting up or managing Office 365 for your organization, this may be a necessity. It's important to note that partners can assign both full and limited administration roles. Full administration privileges are the equivalent to a global admin while limited administration privileges are the equivalent of help desk or password admin. Full administration privileges are the equivalent to a global admin while limited administration privileges are the equivalent to a help desk or password admin. It's also important to note that before a partner can assign these kinds of roles, you need to first add the partner as a delegated admin to your organization's Office 365 account.

To facilitate the admin delegation for a partner, the partner first sends you an email to confirm that you wish to give them permission to act as a delegated admin. Only after you've authorized them to do so can a partner perform these functions.

About the Author
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.