Microsoft 365

Microsoft 365 in the Cloud area. Connect customer tenants with the features you choose, see their users, licences and security posture, make changes now or later, run starters and leavers in the cloud or Active Directory, manage Intune with templates, bundles and the OpenIntuneBaseline, hold tenants to your baselines, keep every enterprise app in view with a kill switch, follow each tenant's sync and look after email security and account threats.

1. 1 Microsoft 365 overview Where Microsoft 365 lives in the Cloud area, how Tenvara reads your customers' tenants, and how to read the overview page.
2. 2 Connecting a tenant Set up the app registration once, then connect each customer's tenant with an admin consent link or through your partner access, choosing the features Tenvara uses there.
3. 3 Tenants and the tenant page The tenant list, everything on a tenant's page (features, notes, domains, Teams, SharePoint, app secrets), licences and groups, and how sync keeps it up to date.
4. 4 Users, groups and mailboxes Find anyone across your customers' tenants, see their sign-in, MFA, licences and mailbox, and make everyday changes.
5. 5 Making changes safely How previews, typed confirmation, approvals, scheduling, tickets and undo work for every change Tenvara makes in a tenant, and where to find the change log.
6. 6 Security findings The security checks run against every tenant, the posture score, fixing findings one at a time or in bulk, accepting a risk, and the CIS, NIST, SCuBA and Essential Eight frameworks.
7. 7 Sign-ins, apps and policies Review risky and failed sign-ins, the enterprise apps a tenant has granted access to, and its Conditional Access policies and templates.
8. 8 Starters and leavers Make a new starter's account with everything they need, or lock a leaver out and keep their mail, now or at a time you choose, in the cloud or in the customer's own Active Directory.
9. 9 Email security Check SPF, DKIM, DMARC, MTA-STS and TLS reporting for every customer domain, add domains in bulk, write the records, read the reports in the report inbox and move each domain safely to reject.
10. 10 Intune and Autopilot See every customer's Intune devices and compliance, run remote actions, manage policies, apps and Autopilot, and deploy the same Intune templates to your tenants.
11. 11 GDAP, LAPS and BitLocker Keep partner access (GDAP) in date and limit what it is used for, and reveal BitLocker recovery keys and Windows LAPS passwords with the vault's permission and audit log.
12. 12 Baselines and drift Write your own standard for customer tenants, assign it to tenants, see where each has drifted and let Tenvara put settings back automatically where you allow it.
13. 13 Configuration snapshots Tenvara keeps every version of each tenant's Entra ID, Conditional Access, Exchange, SharePoint, Teams and Intune settings, flags changes made outside Tenvara, compares any two snapshots and restores an earlier version.
14. 14 SaaS discovery See every app your customers' people sign in to with Microsoft 365 or have granted access to, how risky each one is, and mark it sanctioned or unsanctioned, turn it off or take its permissions away.
15. 15 Account threat response Spot signs that someone else is using a customer's Microsoft 365 account, from impossible travel and stolen tokens to MFA fatigue, and sign them out, block them or force a new password automatically or with one click.
16. 16 Choosing features and consent Pick which Microsoft 365 features Tenvara uses for each tenant, consent only to what they need, turn features on or off later, and consent again when new permissions arrive.
17. 17 Mailboxes, guests and message trace Day-to-day Exchange and Entra work from Tenvara: calendar and mailbox access, shared and room mailboxes, addresses, mail apps, message trace, quarantine, guests, deleted users and passwords sent by one-time link.
18. 18 Hybrid Active Directory For customers who sync their own Active Directory to Microsoft 365, make password resets, unlocks, sign-in blocks, group, detail, starter and leaver changes on their domain controller through the agent, with previews, approvals and undo.
19. 19 Bulk, scheduled and time-limited changes Change many users at once, import new users from a CSV file, run a change at a set time, give access that takes itself away, and keep every change on its ticket.
20. 20 App registration health and Fix it for me Tenvara checks your own Entra app registration every day, says what is missing and why it matters, and can add missing redirect URIs and permissions for you after one sign-in.
21. 21 Importing the OpenIntuneBaseline Bring the community OpenIntuneBaseline into your Intune templates, choose the release and the policies you want, and see policy by policy what a newer release changes before you update.
22. 22 Intune template bundles and updates Save a named set of Intune templates as a bundle, preview and apply it to a tenant as one approved change, see where the tenant has drifted, and push a newer template version in place or side by side with a way back.
23. 23 Devices linked to Intune How Tenvara links each Intune device to the matching device you manage, how to link and unlink by hand, and what the Intune card, the Managed by Intune column and the fields filled from Intune show.
24. 24 Apps across tenants and the kill switch See every enterprise app in your customers' tenants once by its App ID, with what it holds, who consented and when it last signed in, and switch an app off in every tenant at once when it can no longer be trusted.
25. 25 App cleanup, approved apps and the watchlist Clear out enterprise apps nobody needs with the customer's approval and a report for them, keep a list of the apps you allow, and get one critical alert when a known-bad app turns up in any tenant.
26. 26 Conditional Access policies in detail Open any Conditional Access policy in words, see who it covers and what it did to real sign-ins, ask What if for one person, follow its history, change who it leaves out and copy it as a template for other tenants.
27. 27 The sync timeline and Microsoft throttling See when each area of a tenant was last read from Microsoft, how long it took and how late it ran, which tenants cost the most to sync, why a queued area waits, and what happens when Microsoft throttles a tenant.