Splitted administration by domain
On a tenant with several domains (domain1.com, domain2.com), we would like separate my administration. For example, one admin can only manage domain1.com's objects (Exchange, SharePoint, Azure AD) and the other admin can only manage domain2.com's objects.
It could be feasible by RBAC on Exchange but none on AzureAD/SharePpoint
Sylvia L. commented
Yes, this is a must
This would be so much better!
Yes, this is a must. We are en educational institution and both students and faculty/staff are on the same tenant. It's impossible to manage them, they have different set of business rules and must be managed separately.
Phil Burney commented
This is really valuable in a multi-site organisation!
This would aid rollout as individual business units could prioritise their own pieces, rather than having to go through lengthy discussions with all other BUs to agree on things. It would also avoid having one admin team responsible for the whole company's settings (which may be huge), causing the smaller local-quick-wins to be ignored in the aim to push for the cross-company features.
Also, as many businesses are spread across the globe / some have different sub-companies within, this may be useful should a part of the business get sold off. i.e. Rather than the leaving entity having to copy all their data from O365 to their new company's servers, their domain/OU could be more easily partitioned off and moved to the new companies tenant. Obviously that would be much more work than just the above; but this would be a step in that direction.
Dan Risko commented
I agree that this would be useful. We have several domains within our company. Different offices use different domains and we would like to restrict admin roles per domain.