Recently, I found a new job which uses O365 in a hybrid environment. Just to explain a bit, the new environment has On-premises Active Directory plus an instance of On-premises Exchange Server (which actually has no user mailboxes inside). The On-premises Active Directory is synced to an Azure AD in the cloud and all user mailboxes are in Exchange Online in O365.
Currently, for day-to-day administration like updating security groups and distribution groups, I basically update the On-premises AD which will synchronize to O365. If I attempt to update them in Office 365 portal, it will display an error saying that I should go to update it on On-premises AD. The security groups are used by local File Server as well as distribution list in sending emails. However, my manager suddenly announced today he planned to make changes so that we have to go to Office 365 Portal to do the update instead of On-premises AD.
My questions are: 1) What config changes do we need to do in Office 365 in order to achieve what he wants? 2) What advantage do we get by updating in Office 365 portal instead of On-premises AD?