Administrative Units

An administrative unit is a Microsoft Entra resource that serves as a container for other Microsoft Entra resources. It can contain only users, groups, or devices. A user can be a member of multiple administrative units.

Supported Operations

This feature supports the following operations:

• Manage administrative units as entitlements.

• Create a user with a single or multiple administrative units.

• Add/Remove administrative units from users.

Administrator Permissions

To fetch administrative units details, the following API permissions must be assigned:

Type	Permission	Purpose
Application	AdministrativeUnit.Read.All	Aggregate Administrative Units
Application	AdministrativeUnit.ReadWrite.All	Add Users to Administrative Units
Application	AdministrativeUnit.ReadWrite.All	Delete Users from Administrative Units

Supported Schema Attributes

To manage the administrative units, ensure administrative units attributes are present in the group schema. For more information, refer to Administrative Units Attributes.

Configure Administrative Unit

1. Go to Feature Management.

2. Select Manage Administrative Units to manage administrative units.