History of Microsoft Cloud Service Offerings leading to the US Sovereign Cloud for Government

Kevin St Clair In the shared responsibility model for compliance, it is ultimately customer responsibility to manage access control for whom they allow into their tenant.  Once a tenant owner takes possession of their tenant, they may provide access to anyone, to include supporting partners and foreign nationals.  That said, if they do allow foreign nationals in and at the same time they possess CUI in the tenant, it is also customer responsibility to lock down the CUI so that only authorized users have access, such as those with export control licenses.  In short, yes a tenant owner may allow the use of a partner with personnel outside of the US to perform management, but they will also need to safeguard their CUI from access by that personnel.  As you can imagine, Microsoft does not police nor limit customer access provided by tenant owners.