How do admin roles and permissions work between my organization and a CSP partner?

Partner admin access is typically granted through Granular Delegated Admin Privileges (GDAP), which lets you assign specific, scoped admin roles (rather than full Global Admin) to a partner, often with an expiration date. You can review which roles are granted, and revoke or adjust that access at any time through your own admin portal — it's designed to be transparent and controllable from your side, not an opaque blanket grant.