Microsoft Entra Admin Units: New Features!!
Microsoft Entra is big news at the moment and in this video we take a look at one of the brand new features of Administrative Units, specifically
Microsoft Entra, currently a popular topic, has released new features related to Administrative Units, particularly the Restricted Management Administrative Units. This update includes:
- A detailed review of Administrative Units
- A look at the Restricted Management Administrative Units
- Additional pertinent insights
Users can further understand these changes by exploring the following resources:
- Administrative units in Microsoft Entra: Click Here
- Restricted Management: Click Here
- Introducing Restricted Management Administrative Units in Microsoft Entra: Click Here
Administrative Units are resources that can contain other Azure AD resources such as users, groups, or devices. groups, or devices. They are used to define scopes within an organization and restrict permissions accordingly. This is particularly useful for larger organizations with independent divisions, enabling the delegation of certain roles to regional or division-specific support specialists.
Key Features Users can be members of multiple Administrative Units. Administrative Units can't be nested. Currently, Administrative Units are not available in Azure AD Identity Governance.
Use Cases Consider a large university with many independent schools, each managed by its own IT team. A central administrator could create an Administrative Unit for each school, populate it with the school's students and staff, create a role with administrative permissions over that unit, and assign the school's IT team to that role.
Constraints Adding a group to an Administrative Unit only allows management of the group itself, not its members. To manage user properties or authentication methods, the users must be added directly to the Administrative Unit.
Licensing Use of Administrative Units requires an Azure AD Premium P1 license for each administrator and an Azure AD Free license for each member. Dynamic membership rules require a Premium P1 license for each member.
Management Administrative Units can be managed via the Azure portal, PowerShell cmdlets and scripts, or Microsoft Graph API. This includes creating or deleting units, adding users, groups, or devices to a unit, and assigning roles with unit scope.
Planning and Implementation The creation of Administrative Units usually goes through three stages: initial adoption, pruning, and stabilization. The unique requirements of an organization guide the criteria for creating Administrative Units.
Currently Supported Scenarios A Global Administrator or a Privileged Role Administrator can create Administrative Units, add members, manage users or devices with dynamic membership rules (preview), and assign IT staff to unit-scoped administrator roles using the Azure portal. Administrative unit-scoped admins can manage users in their units using the Microsoft 365 admin center, PowerShell, or Microsoft Graph. Note that Administrative Units only apply to management permissions, not user permissions.
A Deeper Look at Microsoft Entra's New Administrative Units
The latest features of Microsoft Entra provide an improved user experience. Considerably, the Restricted Management Administrative Units offer enhanced control and security. It is through these updates that Microsoft shows its commitment to constantly refining and improving its offerings to meet user's changing needs. The provision of resources assists users in understanding these modifications better, aiding the seamless incorporation of these changes.
Learn about Microsoft Entra Admin Units: New Features!!
Microsoft Entra is a new and exciting feature in Microsoft Admin Units. It provides businesses with greater control and protection over their data and resources within their organization. The Restricted Management Administrative Units allows for a more secure way to manage data and resources. It provides the ability to restrict access to certain areas while still allowing users to access the resources they need. Furthermore, it also provides more granular control over who has access to certain resources. Other features of Administrative Units include: Administrative Units recap, Restricted Management Administrative Units, and more. Useful resources to learn more about Administrative Units and Restricted Management Administrative Units are available on the Microsoft Learn website:
Microsoft Entra Admin Units provides businesses with greater control and security over their data and resources. It allows users to restrict access to certain areas while still allowing them to access the resources they need. It also provides more granular control over who has access to certain resources. Additionally, it provides Administrative Units recap, Restricted Management Administrative Units, and more. Businesses can access useful resources to learn more about Administrative Units and Restricted Management Administrative Units on the Microsoft Learn and Microsoft Tech Community websites.
More links on about Microsoft Entra Admin Units: New Features!!
- Microsoft Entra ID Adds Restricted Management ...
- 4 days ago — Microsoft has introduced restricted management administrative units support in public preview for Microsoft Entra ID. The new role-based ...
- More Changes in Microsoft 365 as Azure AD moves to Entra
- Mar 27, 2023 — Changes in Microsoft 365 keep on happening. The Azure AD admin center is moving to the Microsoft Entra admin center from April 1, 2023.
- Microsoft Entra ID Features
- Find out which Identity and Access Management (IAM) features Microsoft Entra ID supports, including SSO, APIs, Tracking, Auditing, Reporting, Reporting, ...
- Microsoft Launches New Entra Admin Center to Unify ...
- Dec 2, 2022 — According to Microsoft, the new admin center unifies visibility and administration of the Entra portfolio of identity and access solutions, ...
Keywords
Microsoft Entra, Microsoft Entra Admin Units, Restricted Management Administrative Units, MSENTRA, ENTRA, ENTRAID, SSE, SASE, SECURITY, AZUREAD, AZUERACTIVEDIRECTORY, MICROSOFT365, M365