Service · Microsoft 365 · In development
Manage Microsoft 365 for your customers and release it deliberately — without Global Admin.
The Microsoft 365 module is still being built. Once it ships you will connect the Microsoft 365 tenants you look after to Omninode and define which functions your customers may see or carry out themselves. Viewing and changing will be released separately, and every action will land in the audit trail.
Planned capabilities
What a Microsoft 365 view will grant
Planned scope for the module. Every domain has two switches: view and manage. Manage always requires view, never the other way round. None of it is available yet.
Users
Search accounts and inspect them in detail — license status included. With manage rights, entitled users will be able to create users, enable or disable them, reset passwords and revoke active sign-in sessions.
Groups
Search groups and inspect their members — across nested groups as well. With manage rights, entitled users will be able to add or remove members.
Licenses
Inspect the tenant's license inventory by SKU — broken down into directly assigned licenses and those inherited through groups. With manage rights, licenses will be assignable to and removable from individual users or whole groups. Departures from the group rule through direct assignments are logged so they stay traceable.
Onboarding templates
Define which steps a new joiner goes through, assign the template to a tenant and start the onboarding. You will see a preview before it starts. Credentials are handed over as a one-time secret.
Compliance posture
Check the tenant against your rule set and see, for every check, the target state, the actual state and any deviation. Checks are planned to cover backup administrators, the DMARC mailbox, required security groups, security defaults, guest invitations, self-service sign-up, default user permissions, MFA coverage and blocked legacy authentication, among others. Earlier scans stay traceable in the history. Where the necessary grant is in place, you will be able to start a new scan at any time.
Conditional Access
Conditional Access policies are pulled live from the tenant and brought together in one consistent view. That will save you clicking through the Azure portal. The same data is the basis for the MFA-coverage and legacy-authentication checks.
App registrations
See at a glance when the credentials of recorded app registrations expire. So an expired secret does not first come to light once an integration has already stopped.
Compliance rule set
Define once which checks apply and what target state is expected for each. Deliberate deviations can be excepted with a reason so they do not show up as errors forever. A rule set can be assigned to several tenants as a template. Detected deviations are first shown as a planned change and only remediated after you confirm — nothing is altered unnoticed.
Audit trail
Every triggered action is logged with its individual steps and results. The log can be exported in sanitised form. Personal data of individual executions can be erased on request.
Scoped views
One connection, any number of views
You will connect each tenant you look after once, through admin consent. Views define who may see what and change what; through grants you decide which organization gets which view.
- 1
Viewing and changing are separate
Every domain has two switches. A view may inspect users without being allowed to change them. The reverse cannot happen: manage without view will not save.
- 2
Grants define the recipient
A grant links one customer organization to one view. People sign in with their own accounts — no shared Global Admin, no standing rights in the Azure portal.
- 3
Nothing happens without a connection
Grants alone are not enough: Omninode also checks that the tenant is bound and reachable. If consent is missing or the connection breaks, the area turns inert rather than empty, with the reason on show.
Be ready when the Microsoft 365 module ships
The module is still in development. Register your interest and we will get in touch as soon as it is ready for your tenants.