title: Azure AD User management delegation
body: <p>I am using Azure AD to create users, groups for an application that sits outside of Azure AD (hosted internally)</p>
  
  <p>I want the ability to delegate the user management to an admin of that application (create users, assign groups etc)</p>
  
  <p>I can see that in the Premium Azure AD subscription you can create AD users that have access to the WAAD Access Panel (myapps.microsoft.com) and they can see groups, you can assign users to groups and view/action approval requests </p>
  
  <p>There however doesnt look like there is any way to create users through this interface which is odd. Seems like it should be there if the user has "User Management" role. </p>
  
  <p>Is there any other way to provide basic level user management delegation to an application admin?</p>
  
  <p>The only other way I can see is for a user admin to create a whole new azure subscription (but part of same tenant) and go through the management portal - which is not ideal because they have access to other Azure resources (creating instances, db etc). I only need the admin to be able to access user management of AD</p>
  
  <p>I know I can create another application and use the Graph API but this might be re-inventing the wheel if Azure AD already has something like this. </p>