Office 365 admin portal. In the admin center, go to Roles-> Role assignments.