Case # 00434131 - Possibility to administer O365 ressources and users with different administrator roles?
Our company has admins that need to be able to administer O365 ressources according to their responsibility/department.
Because of GDPR (EU-DSGVO) it is not possible to give all admins worldwide the same permissions: HQ is in Germany (admin role on all O365 objects needed), but UK admins must only be able to administer UK ressources, and US admins must only be able to administer US ressources.
Since all ressources belong to the same tenant, there is no possibility to differ by subdomain, country or administrative role.
A possible solution for this would be to ristrict admin roles according to AD attributes (country/custom attributes/department).