Delegating permissions
- Hide directory objects from users
- Grant rights to create users
- Allow managers to manage their direct reports
- Grant rights to modify group membership
- Grant rights to reset passwords and unlock accounts
- Grant rights to modify account options
- Grant rights to create and modify business units
- Deny rights to delete users
- Grant rights to execute custom commands
- Grant rights to modify specific properties of directory objects
- Grant rights to move objects
- Grant rights to perform Exchange tasks
- Grant rights to perform Microsoft 365 management tasks
- Grant rights to view reports
- Request approval for user creation
- Request approval for adding members to groups