Delegated administration FAQ


The improved Microsoft 365 Defender portal is now available. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. Learn what's new.

This article provides frequently asked questions and answers about delegated administration tasks in Microsoft 365 for Microsoft partners and resellers. Delegated administration includes the ability to manage Exchange Online Protection (EOP) settings for other tenants (companies).

I'm a reseller and I need to manage my customer tenants. How does this work?

If you're a Microsoft partner or reseller, and you've signed up to be a Microsoft advisor, you can request delegated administration capabilities in your customer's Microsoft 365 organization.

Delegated administration allows you to manage Microsoft 365 (including EOP settings) as if you were an admin within that organization. The steps to configure delegated administration are described in the following list:

  1. Sign up to be a Microsoft Office 365 Advisor.

  2. Sign up for delegated administration. Before you can start administering a customer's tenant, they must authorize you as a delegated administrator. To obtain their approval, you first send them an offer for delegated administration. You can also offer delegated administration to your customer at a later time.

  3. Create the delegated admin account using the steps in Add, change, or delete a subscription advisor partner.

Visit Partners: Build your business and administer partner subscription for more information about how to set up delegated administration.

I'm a customer, not a reseller. How can set up delegated administrator for my subtenants?

Delegated administration is only available for resellers and partners. However, there's a sample PowerShell script that will help you apply policies to your subtenants (companies). For more information, see Sample script for applying EOP settings to multiple tenants.

Can I prevent my subtenant admin from modifying my policy?

No. Microsoft 365 does not currently have this capability.

Can I get consolidated reporting across all of my subtenants?

Consolidated reporting across the companies you manage isn't available in Microsoft 365 admin center reports. However, you can get reports by using Microsoft Graph.