Azure AD – You can now manage the Azure AD Administrative Units using the portal

You may already know this Azure AD feature, in preview for quite some time already, called Administrative Units (AUs). This feature allows you to create a container to store Azure resources which then can be used to delegate administrative tasks, during this preview period this can contain only users and groups and is only manageable using PowerShell (New-AzureADAdministrativeUnit).

Well, good news as this is now also available using the Azure AD portal ( or

Once logged on your Azure AD, reach out the Administrative Units blade

image_thumb[1]  image_thumb

Then you can create your administrative unit using the Add button – off course if you already used the PowerShell command, your existing AU’s will be displayed there too

image_thumb[3]  image_thumb[4]

Once you have created your AU, you can then add users and/or groups into it as well as managing delegated permissions by using assigning the limited Azure AD roles to the team in charge of managing this AU

image_thumb[5]  image_thumb[6]

Benoit Hamet
Benoit Hamet
Benoit is working on Microsoft collaborative technologies He has been awarded as MVP for more than 12 years Currently MVP on Office 365 after being awarded on SharePoint (2011-2012) and Windows client & server (2002-2007) Speaker at various Microsoft events (TechDays, TechNet seminars) and Quest Software He works on on-premises (Active Directory, RADIUS/NPS, Exchange, Skype for Business, SharePoint, SQL, Terminal Server, Windows client and Windows Server) or online (Azure, Intune, Office 365, Exchange Online, SharePoint Online, Skype for Business Online, Teams) technologies