How to configure Admin Units for Office 365 Groups

Summary: Follow these step-by-step instructions to configure Admin Units for Office 365 groups.

Applies to: Cayosoft Administrator 6.1.0 or later

ID: KB20190506-1

---

Content: 

Overview

Summary of the steps to configure Admin Units for Office 365 groups:

1. To keep track of Office Group assignment to a specific Admin Unit, one of the Exchange Online extension attributes will be used. To populate the extension attribute for Office Group, add it to the Custom Attributes page of the New Office 365 group and Office 365 group properties web actions.

2. To show only groups located in a specific Admin Unit, a web query condition has to be updated. Copy and configure Groups-Office web query in default Microsoft Office 365 container.

3. Move copied Groups-Office web query to a new Admin Unit.

4. To enforce group extension attribute be properly populated when created in the specific Admin Unit, an attribute policy has to be configured. Apply attribute policy to a custom Admin Unit that enforces creating a New Office 365 group with the custom attribute value equals to Admin Unit name.

5. Assign delegation roles for a new Admin Unit.

 

Configuring New Office 365 group web action

1. Navigate to Web Actions
2. Click Microsoft Office 365 > New Office 365 Group
3. Browse for Other attributes section
4. For Other Attribute 1 specify the required attribute. For example, select Custom Attribute1.

 

Configuring Office 365 Group Properties web action

1. Navigate to Web Actions
2. Click Microsoft Office 365 > Properties
3. Browse for Other attributes section
4. For Other Attribute 1 specify the required attribute. For example, select Custom Attribute1.

 

Creating new Admin Unit

1. Navigate to Admin Units (Web Queries) 
2. Click Microsoft Office 365 > Groups-Office
3. Click Copy Rule
4. For copied custom Groups-Office web query:
   1. Define filter for Query Criteria: {CustomAttribute1 -eq "$AdminUnitName"}
   2. Click Save changes
   3. Click Move Rule
   4. Click Create new folder (label)
   5. Specify a name for a new custom Admin Unit 
   6. Click OK

 

Configuring Attribute policy

1. Specify policy scope:
   1. Check created Custom Admin Unit
   2. Check Groups-Office web query
   3. Check web actions: Properties and New Office 365 group
2. Specify attribute policy settings for Other attribute 1:
   1. Is Read-only
   2. Override label: User department
   3. Generation value: select CayoAdminUnitName token
3. Click Save changes

 

Configuring delegation rule

1. Navigate to HOME > CONFIGURATION > Roles > Web Administrators
2. Click Add Delegation Rule
3. Specify delegation rule name
4. Specify trustees
5. Specify trustee permissions: select created custom Admin Unit, custom Groups-Office web query and the required actions.