Create a custom admin role for CRM Online
There are customized roles for EXO, SPO and Skype for Business with O365. Why does the customized role Service admin allow unrestricted access to the admin (Settings) areas used to manage and configure CRM Online?
It seems this 'strategic' solution is nothing more than a security after thought.
Dan M commented
This now exists as "Dynamics 365 service administrator". #please-close