Obtain granular admin permissions to manage a customer's service.



Appropriate roles: Admin agent


Partners can request granular delegated admin privileges (GDAP) for more granular and time-bound access to their customers' workloads. More granular control better addresses customers' security concerns.


  1. Sign into Partner Center and Click on Customers 

  2. Click on Administer and then Click on Request Admin Relationship

  3. On the Create an admin relationship request, enter a name in Admin relationship name and a duration in Duration in days.
    a. Admin relationship name must be unique and is visible to the customers in the Microsoft 365 Admin Center.
    b. Duration in days is the duration after which the granular admin relationship automatically expires.
    c.  Select Azure AD roles, which opens a side panel with a list of granular Azure Active Directory (Azure AD) roles.
    d. Click on Save
    e. To confirm, select Finalize request.

  4. The permission request email message to be sent to your customer appears in the Request box. You can edit the text of the request email message, but don't change the link under Click to review and accept because the URL is personalized to link the customer directly to your account.

  5. Click Done
  6. Send the email to your customer.

    When the customer accepts your request, they'll appear in the Granular administration list on your Administer page. Both you and the customer will get a confirmation email notification after approval.


For More Details: -Obtain granular admin permissions to manage a customer's service - Partner Center | Microsoft Learn