Allow rights to be delegated for domain & DNS management.
At the moment only Global Admins have rights to do this.
If we give our AD team GA rights, they obviously have full control over all the products in O365.
Our company needs to be able to segregate roles to only authorised personnel.
Yes, the people responsible for adding domains shouldn't require global admin.
Allowing us to create custom admin roles for an Office 365 subscription as we can for a normal Azure subscription could also solve this.