Microsoft 365 management, without the admin-center maze

Everyday Microsoft 365 admin, with buttons

• Onboard a person: create the account, assign a license, add to groups, require MFA
• Offboard a person: block sign-in, end sessions, remove MFA methods, convert the mailbox to shared, forward mail, hand over OneDrive, free the license
• Reset MFA, revoke sessions and unblock sign-in
• Reports on MFA status, external forwarding, license use, mailbox size, guests and app permissions, each row with an action
• DKIM signing for your domains, read from Exchange and published to your DNS host

Changes like an IT engineer would make them

Each change follows the same discipline: a plan in plain words, a backup of the current settings, the change itself, a check that it worked, a record of who approved it and a one-click undo. New Conditional Access policies start in report-only mode so you can see who they'd affect first.

Disruptive changes, like blocking a person's sign-in, need you to type their email to confirm. Teams can require a second approver.

Security posture, explained

The checkup reads your tenant with read-only permissions you approve in Microsoft's own consent screen. It looks at MFA coverage, legacy authentication, admin role sprawl, security defaults and Conditional Access, mailbox auditing, external forwarding, risky app consents and guest access, then ranks what it finds by business impact.

TenantWard never reads the contents of email or files, and it doesn't store your Microsoft tokens.

Plans

The checkup is free during the 7-day trial. Manage, from $39 a month per company, unlocks every fix guide and one-click routine changes. Protect, from $99, adds disruptive changes, 24/7 monitoring and incident response.

Questions

What permissions does TenantWard need in Microsoft 365?

The checkup uses delegated, read-only Microsoft Graph permissions that you approve with your own admin sign-in. Changes run with your sign-in at the moment you approve them. 24/7 monitoring uses a separate read-only app approval. The security page lists every permission and why.

Does it replace the Microsoft 365 admin center?

For the everyday jobs of a growing company, mostly yes. You can still use Microsoft's admin centers for anything TenantWard doesn't cover, and TenantWard will pick up the changes on its next check.

Does it work with Business Basic, Standard and Premium?

Yes. Some checks and fixes, like Conditional Access, need Entra ID P1, which comes with Business Premium. TenantWard tells you when a fix needs a license you don't have and suggests the alternative, such as security defaults.