You plan to migrate the company to Azure. Each division will have an administrator to manage that division's Azure resources. You want the Azure deployment to be segmented by division while minimizing administrative overhead. The proposed solution is to use multiple Azure Active Directory (Azure AD) directories. Does this solution meet the goal?

No, using multiple Azure AD directories (tenants) would increase administrative overhead. Each tenant is a distinct identity boundary, requiring separate user accounts, subscriptions, and management. This complicates cross-divisional collaboration and centralized policy enforcement. A better solution is to use a single Azure AD tenant and segment resources using management groups, subscriptions, resource groups, and role-based access control (RBAC). This allows division administrators to manage their specific resources within a unified identity and management plane, minimizing overhead while maintaining segmentation.