With Microsoft's online services (like Azure and Office 365) a legion of possibilities are at your fingertips. But how do you prevent getting slowed down by day to day administrative work, like managing distribution lists, verifying Endpoint Manager device compliance and adding people into groups? The answer: Delegate!

During this session we will be looking into how you can delegate the usual day to day administrative tasks that go with managing Office 365, Endpoint Manager and Azure environments. By using Administrative Units, Endpoint Manager tagging, and configuring the right Exchange permissions you will be able to delegate a lot of the administrative work (overhead?) that for example your servicedesk-colleagues are fit to handle. Additionally, when implementing Identity Governance, you allow (specific) users for self-service when requesting access to specific applications, groups and Teams with the ability to set time limits on the access granted, practical for contractors as well. And finally, by implementing Access Reviews you allow (specific) users to validate active shared files to make sure no unwanted or expired access is granted to folks outside your organization. That way you can free up your time to focus on what really matters!

It can be very beneficial to delegate the right permissions and activities at the right time, to local support teams and (specific) end-/key-users, without compromising in security, by only giving out the permissions that are really required. Microsoft enables us to do just that in many ways, but what's possible and where do you start on setting this up? We will be going through the possibilities that are available for whom, and how to configure these.