"Stuff like making it easier to hide teams-emails from the company-wide outlook address-book" is not this an implementation thing instead of infrastructure? Say you use LDAP to manage user and permissions etc and it is up to you how you want to set it up. I am curious to find out if you are using some out of box solutions form AZURE for this.