Creating Microsoft Entra ID AUs
Microsoft Entra ID AUs are used in scenarios where granular administrative control is required. AUs enable you to delegate administrative control over specific subsets of users and resources to different administrative units, based on role or location.
AUs have the following prerequisites:
- A Microsoft Entra ID P1 license is required for each AU administrator
- A Microsoft Entra ID Free license is required for AU members
- A privileged role administrator or global administrator is required for configuration
Note
AUs can be created via the Azure portal or PowerShell.
Next, you will create an AU via the Azure portal:
- Navigate to the Azure portal by opening a web browser and browsing to https://portal.azure.com.
- From the left-hand hamburger menu or the main search bar, select
Microsoft
Entra ID
. - Under the
Manage
settings area from the left-hand menu, selectAdministrative units
, and then click on+
Add
.