2.1.1. Microsoft 365 Admin Center: Org-Wide Configuration
š” First Principle: The Microsoft 365 admin center is where you manage the tenant itself ā the organization's identity, its users, its domains, and its subscriptions. It's the starting point for everything, but it delegates the deep work to workload-specific centers.
When a new employee joins, you start here: create their account, assign a license, add them to groups. When a new domain is acquired, you verify it here. When you need to change org-wide settings (like the organization name or the default sharing behavior across the tenant), you're in the M365 admin center.
Key objects and tasks managed here:
- Users: create, edit, delete user accounts; reset passwords; assign licenses; manage MFA per user
- Groups: create Microsoft 365 Groups, Security Groups, Distribution Groups; manage membership
- Domains: add and verify custom domain names; configure DNS records
- Org settings: configure org-wide defaults (e.g., MyAnalytics settings, Viva Insights, bookings)
- Billing: manage subscriptions, licenses, and payments
The M365 admin center also serves as a launchpad ā it has links to all workload-specific admin centers so admins can navigate from one place.
ā ļø Exam Trap: The M365 admin center can do basic user management, but it does NOT manage detailed mailbox settings, SharePoint site permissions, or Teams call routing. Those require navigating to the respective workload admin centers.
Reflection Question: A new employee needs a mailbox, a Teams license, and access to a SharePoint site. Which parts of this setup can you complete entirely in the M365 admin center, and what requires you to go elsewhere?
