My organization of ~400 users uses M365 with SharePoint Online. We are hiring a new M365 Engineer/Admin who needs a lot of SPO (and other) Admin access to do all the things he’ll need to do.

My Dir of IT would like us to prevent this new engineer/admin for being able to access a couple SPO Sites like Finance and Exec Team and prevent access to a couple document libraries in our HR site.

What is the best way (or best practices) to set this up in Entra ID and/or M365? Oh, we are fully cloud-based, so no local Domain Controllers and servers.

Thanks!

Brian

​My organization of ~400 users uses M365 with SharePoint Online. We are hiring a new M365 Engineer/Admin who needs a lot of SPO (and other) Admin access to do all the things he’ll need to do. My Dir of IT would like us to prevent this new engineer/admin for being able to access a couple SPO Sites like Finance and Exec Team and prevent access to a couple document libraries in our HR site. What is the best way (or best practices) to set this up in Entra ID and/or M365? Oh, we are fully cloud-based, so no local Domain Controllers and servers. Thanks!Brian  Read More

​