-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Microsoft Identity and Access Administrator SC-300 Exam Guide
By :

Administrative units are groups of users and devices that can be managed by specific administrators.
In an on-premises Active Directory setup, you can delegate administrative functions using the Delegation of Control wizard in Active Directory Users and Computers or Active Directory Administrative Center.
Unlike the hierarchical structure of on-premises Active Directory, Entra requires defining boundaries such as administrative units to delegate control. Administrative units are logical boundaries that can contain users, groups, and devices.
Administrative units in Entra can be role-scoped, allowing administrators to be granted specific roles (such as Helpdesk Administrator), thereby limiting their administrative capabilities to only the assigned administrative units.