In the way to limit the need and use of the global administrator role, 3 new administration roles have been made available:
- Groups administrator to delegate groups (Azure AD security groups, Office 365 Groups, Teams or Yammer) management, covering naming convention, expiration policy or even AAD security group restoration
- Office apps administrator allows you delegating Office apps settings like policies (Office Cloud Policy Service – https://aka.ms/o365clientmgmt), self-service download settings or also the ‘What’s new content’ (currently in preview). This role also grants permission for managing support request and service health access
- Power platform administrator used to delegate Power Platform (Dynamics 365, Flow, PowerApps) all administration tasks
These roles are available from both Azure (https://portal.azure.com/), Azure Active Directory (https://aad.portal.azure.com/) or Office 365 Administration (https://admin.microsoft.com/) portals