Body:
With the greater visibility, your organization may also want to enable more control on how your organization’s data is being accessed by administrators. We are excited to introduce new global workload-specific service admin roles for Exchange Online, SharePoint Online and Skype for Business Online. These new roles provide your organization with more options to improve compliance by limiting access to data to only those who need it. If your organization manages your Office 365 IT administrators according to workloads, then this feature is for you.
In addition, there is now more flexibility in assigning roles. If your Office IT administrator has multiple responsibilities i.e. SharePoint Online and Skype for Business Online responsibilities but not Exchange Online, you can assign multiple roles to that administrator. You are no longer limited to only one role assignment per administrator.
With the new workload-specific admin roles and the ability to select multiple roles, we aim to provide you more options to select the right administrator permissions and control who has access to your data. The rollout for workload-specific admin roles is targeted for this June.
Better manage your organization
Workload-specific admin roles will provide more flexibility to organizations that want to structure admin access by workloads (Exchange, SharePoint and Lync).
For example, Exchange admins will no longer require global admin rights to manage only the Exchange workload.
Here is an example that how can you now:
Before there was only this 5 roles
Office 365 admin role |
Role in Exchange Online |
Role in SharePoint Online |
Role in Lync Online |
global admin |
|
SharePoint Online admin |
Lync Online admin |
billing admin |
N/A |
N/A |
N/A |
password admin |
Help Desk admin |
N/A |
Lync Online admin |
service admin |
N/A |
N/A |
N/A |
user management admin |
N/A |
N/A |
Lync Online admin |
And now will be 8 roles like this
Office 365 admin role |
Role in Exchange Online |
Role in SharePoint Online |
Role in Skype for Business Online |
global admin |
|
SharePoint Online admin |
Skype for business admin |
billing admin |
N/A |
N/A |
N/A |
password admin |
Help Desk admin |
N/A |
Lync Online admin |
service admin |
N/A |
N/A |
N/A |
user management admin |
N/A |
N/A |
Lync Online admin |
Exchange Admin |
Exchange Admin |
N/A |
N/A |
Skype for Business admin |
N/A |
N/A |
Skype Admin |
SharePoint admin |
N/A |
Sharepoint Admin |
N/A |
With all this you can now only give the admin permissions on a part of Office 365, not required to be a global admin like before.
This was announced at http://blogs.office.com/2015/05/05/whats-new-in-office-365-administration-from-microsoft-ignite/