Skip to content
← Back to the guide

Entra ID Administrative Units

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Entra ID Administrative Units

Administrative Units scope admin roles to subsets of the directory — for delegated administration without tenant-wide privileges.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-administrative-units

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

What are administrative units in Entra ID?

Containers for users, groups, and devices that scope an admin role to a subset of the directory — a helpdesk role that can reset passwords only for the Nordic users, for example. They are the Entra equivalent of delegat…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-administrative-units

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

Do administrative units need a licence?

Entra ID P1 for the admins who hold a role scoped to an administrative unit. Members of the unit do not need extra licences.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-administrative-units

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

Can administrative unit membership be dynamic?

Yes, for users and devices — a rule such as department or country populates the unit automatically. Restricted management administrative units go further and block tenant-wide admins from modifying the members, which pr…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-administrative-units

Slide 4Download PNG

Auto-generated from Entra ID Administrative Units. This page is not indexed and isn't part of the guide itself.