Role-Based access

The Voice Of O365 includes Role-Based Access Control (RBAC) groups to enable you to delegate administrative tasks while maintaining high standards for security. 

With RBAC, administrative privilege is granted by assigning users to pre-defined administrative roles, including the 11 predefined roles that cover many common administrative tasks. Each role is associated with a specific list of Lync Server Management Shell cmdlets that users in that role are allowed to run. You can use RBAC to follow the principle of "least privilege," in which users are given only the administrative abilities that their jobs require.

Outside of Skype for Business RBAC administration access The Voice of O365 also defines security or distribution groups for access to Automated Attendent groups.