Delegating Admin Capabilities for Office 365
The set of administrative roles provided by Microsoft for an Office 365 deployment are designed around a centralized management model. Within the admin center, there is no way to setup regional management rights for administrators who ONLY want to monitor and manage their local business unit or geographical site users. For large enterprise organizations, or companies that are split into multi-tenant Office 365 environments, there are complex administration requirements to support their deployments. What if they want to delegate admin tasks by different countries, business units, or office locations? What if they want to enable help desk engineers to perform ONLY simple admin tasks on their regional users?
Luckily, the folks at 4ward saw this gap and included it in their award-winning Office 365 management software: 4ward365. With 4ward365, you can segment your users pretty much any way you like—by location, business unit, department, and more. Once you have those user groups configured, you can grant a specific set of admin permissions to administrators who will ONLY be able to view and manage that specific subset of users. It’s that easy. Because 4ward365 was architected to enable flexible Office 365 administration, these capabilities are inherent.
- Assigning Regional Administrators to Manage Their User Communities
- Enabling Management of Multi-Tenant Environments
- Empowering Help Desk Engineers with Support Services
Grouping Users and Assigning Regional Administration
The first step to enable regional administration for a subset of users in Office 365 is to segment common users into a group. This feature uses simple drop-down menus to create filters based on specific attributes that users have in their account information. For instance, in the example below, a new group called “Italy Sales” is created and the selection filter to delegate what users will be included has “Country = Italy” and “Department = Sales.” In effect, this segments all Italian employees in the sales organization into a specific grouping that can be assigned to a regional administrator to monitor and manage. This administrator will ONLY be able to perform account updates and view activities and reports for that list of users.
Customized Admin Permissions for Regional Management
The final step is to create the specific set of permissions, or entitlements, that you want to assign to a regional administrator. To do this within 4ward365, you just need to go back to the management menu and choose “Manage Permissions.” From there, you can create a new permission template, assign a remote admin with a controlled set of administration actions, and specify a set of reports they will be able to view. The available reports and admin actions are chosen from simple selection menus as shown in the example screenshots below.