Create Granular M365 Admin Permissions with Virtual Tenants

With CoreView, you can divide different user groups, acquired companies, subsidiaries or even departments into new groupings, or Virtual Tenants, for more efficient management. Once you have those segments configured, you can grant a subset of actions to administrators who will ONLY be able to monitor and manage that subset of users.

By breaking into smaller groups, often based on Active Directory attributes, you can restrict what users can see and act on, making it much easier to manage than having to tackle the entire organization in one bite.

IT admins are often the source of date leakage and other damage – either through malfeasance or mistakes. By restricting their rights to a Virtual Tenant, admins are kept from damaging other parts of the M365 environment.

Creating help and service desks for a huge mass of users is difficult, and these desks can become overwhelmed and non-responsive. Managing M365 licenses across a distributed massive environment is inefficient and expensive at best.

Security is the biggest issue. If you have a single tenant with 300,000 users, an O365 admin can access data and settings from all 300,000 users. Every single O365 admin has that ability. If a hacker cracks an O365 admin’s credentials, they have that same power. Scary. CIS and Microsoft advise only having 2-4 global admins.