Azure AD – You can now manage the Azure AD Administrative Units using the portal

You may already know this Azure AD feature, in preview for quite some time already, called Administrative Units (AUs). This feature allows you to create a container to store Azure resources which then can be used to delegate administrative tasks, during this preview period this can contain only users and groups and is only manageable using PowerShell (New-AzureADAdministrativeUnit).

Well, good news as this is now also available using the Azure AD portal ( or

Once logged on your Azure AD, reach out the Administrative Units blade

image_thumb[1]  image_thumb

Then you can create your administrative unit using the Add button – off course if you already used the PowerShell command, your existing AU’s will be displayed there too

image_thumb[3]  image_thumb[4]

Once you have created your AU, you can then add users and/or groups into it as well as managing delegated permissions by using assigning the limited Azure AD roles to the team in charge of managing this AU

image_thumb[5]  image_thumb[6]