Delegated administration FAQ
This topic provides frequently asked questions and answers for Microsoft partners and resellers who want to perform delegated Office 365 administration tasks, including the ability to manage Exchange Online Protection (EOP) for other tenants (companies).
Q. I'm a reseller and I need to manage my customer's tenants; how does this work?
A. If you are a Microsoft partner or reseller, and you've signed up to be a Microsoft advisor, you can request permission to administer their tenant within the admin center. This is known as delegated administration, and it allows you to manage their Office 365 tenant (including EOP settings) as if you were an administrator within their organization. The steps for performing delegated administration are as follows:
Sign up to be a Microsoft Office 365 Advisor.
Sign up for Office 365 delegated administration. Before you can start administering a customer's account, they must authorize you as a delegated administrator. To obtain their approval, you first send them an offer for delegated administration. (You can also offer delegated administration to your customer at a later time.)
Create the delegated admin account.
Visit Partners: Build your business and administer your Office 365 partner account for more information about how to set up Office 365 delegated administration.
Q. I'm a customer, not a reseller, how can set up delegated administrator for my sub-tenants?
A. Delegated administration is only available for resellers and partners at this time. However, we've provided a sample Windows PowerShell script that will help you apply policies to your sub-tenants (companies). For more information, see Sample script for applying EOP settings to multiple tenants.
Q. Can I prevent my sub-tenant admin from modifying my policy?
A. Office 365 does not currently have this capability.
Q. Can I get consolidated reporting across all of my sub-tenants?
A. Consolidated reporting across the companies you manage is not available for the Micrsoft 365 admin center reports at this time. However, this can be done via remote Windows PowerShell or the reporting web service.