Get started with Microsoft 365 Administrative Units

[@chaosmassive8627]

can you please do series with SCCM (config manager), especially with co-managing with intune.

[@hhhennig]

Question: can you explain , how ot use Access Review to automatically remove guests

[@AndyMaloneMVP]

Hi Holger. I can do better than that. It would take some time to explain that here but I'll go ahead and schedule this for a future video. I think it would be a good one. In the meantime here's an interesting document that I think you'll find useful :-) docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview Thats an access review. However I think you actually meant an access package which I covered previously here kzbin.info/www/bejne/h5fSln6na9aeg7s

[@tony6626]

Awesome video and demonstration as always Andy.

[@AndyMaloneMVP]

Thanks Tony You m delighted you enjoyed it😊

[@honkamaster]

Thank you. What I would be personally interested is a video with topic Mac in a MS world. As you in admin life use mac. Are there any problems and how to go around those. Can you actually use full PS world with osx etc. :)

[@shelleygrove1034]

Yes I would be interested in that as well Andy. I know you can have a defender sensor on a Mac. But what are the other things you need to consider?

[@AndyMaloneMVP]

Hmm interesting. Let me see what I can do. I do know that you deploy it via Endpoint Manager. Perhaps I'll cover that in a follow up session. :-)

[@shelleygrove1034]

@@AndyMaloneMVP thank you Andy. Keep these coming. We have just switched to all these new tools and your videos have really helped.

[@honkamaster]

@@AndyMaloneMVP Sounds promising! And also how to get airplay work with intune enrolled devices. :D and everything would be welcome. Thanks for everything. :D

[@AndyMaloneMVP]

@@honkamaster You’re very welcome, and by the way you’ll notice I’m a Mac user😀

[@lce_hunter9438]

Great video! Only one question: is i right understood - there is no option to add users to AU automatically?

[@AndyMaloneMVP]

Hey thanks for your comment. Actually there is a way. Announcing dynamic administrative units now available in public preview. I will do a session on this shortly but for now here is some useful documentation for you. techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/azure-ad-rbac-dynamic-administrative-units-now-in-public-preview/ba-p/3185207

[@simple-security]

how would this work with Purview roles?

[@AndyMaloneMVP]

It’s integrated into Microsoft purview and many of the wizards

[@simple-security]

@@AndyMaloneMVP I'd love to see a demo of this using pim. The AU makes sense but I don't understand how they work with pim and Purview roles, or do we just associate the AU with pim?

[@ibrahimolaitan1218]

Hi Andy, great video, So if Obiwan sign in into his account, the Admin center will only be showing the users and groups in the Admin Unit for him to manage? I did same configuration, but when i sign into the user account that should be managing the Admin unit, the user does not have access to the admin center. Any thought on that. Thank you.

[@AndyMaloneMVP]

Make sure that the user is a member of an appropriate admin role. For more documentation visit, learn.microsoft.com

[@patrick__007]

Great content Andy!

[@AndyMaloneMVP]

Thank you Sir 😊

[@abdulrahman5591]

Hello Andy Can you tell me how can we do the same with SharePoint adminsitrator role. I have set up AU with the SharePoint admin role however while testing with the AU Admin he is unable to se the SP Admin center. Same behavior with the Teams Admin role in AU

[@AndyMaloneMVP]

SharePoint Admins can now be members of an Admin Unit.

[@clodola1]

Hi Andy , did you try and sign in as a User assigned the role of User admin within the scope of the admin unit , Obiwan? Under permissions of the User admin role it states the admin can add users , but this is not not allowed , MS said , only password reset is allowed ,you need to be a global admin or have a Privileged role administrator of the whole Azure Entra ID , Edit: Admin Unit , Role: User administrator, Permissions/General Tab: Information is incorrect, the action listed that a user admin can do is copied from the role permission of user admin in directory level, the user admin in admin unit can manage users within the unit like updating user, etc, but is not able add or remove members. MS need to update the incorrect information illustrated regarding eligible permissions of Admin Unit , Role: User administrator

[@AndyMaloneMVP]

Indeed you are quite correct. Nicely spotted 👍😊

[@abdalrahman6124]

thank you for your effort, it was helpful

[@warrenk9587]

Another good video, Andy. I watched the video that you answered a question to at the end of this video. Do you know if Microsoft has the necessary security in SharePoint that is needed for companies required to implement, National Institute of Standards and Technology (NIST) and Cybersecurity Maturity Model Certification (CMMC)? If so, where might I find the documentation?

[@AndyMaloneMVP]

This is a great question and I’ll cover it in my next video 😊

[@warrenk9587]

@@AndyMaloneMVP That would be great! Thank you!

[@xbeone]

Thank you and keep it up.

[@AndyMaloneMVP]

Thanks, will do!

[@hhhennig]

Love it. .. great