TL;DR: Most MSPs still run with standing access to customer tenants through GDAP. That’s convenient but dangerous. Switching to Privileged Identity Management (PIM) for Groups in Entra ID gives your techs just-in-time (JIT), time-bound access with MFA, approval, and auditing. This post shows you the “why,” the architecture, and the exact steps to deploy it […]
In the past, I’ve written some blog posts that show how you can setup automation across tenants leveraging GDAP. GDAP effectively broken a lot of MSP and vendor automation because it requires a specific configuration. In this article, I am going to share a script I have created so that you can update permissions for […]
In October of last year, I published an article explaining how GDAP breaks vendor integrations: Vendor Integrations will Break with GDAP – (tminus365.com) This is specifically for Vendors using an integration that leverages delegated access into downstream customer tenants. If you are a vendor that requires consent to your integration at a per tenant level, […]
I’ve been blogging about GDAP for over a year now. If you are not familiar with GDAP, I suggest you check out some of my earlier articles to get a breakdown. Its very important to understand GDAP before reading this article: What is GDAP GDAP Checklist Leveraging PIM with GDAP As a CSP Partner with […]
A few months ago, I published a video showcasing a comparison of the GDAP migration tools available. Since that time, the Microsoft 365 Lighthouse team has introduced a new migration tool for GDAP to help partners streamline the move, in bulk, across customers. If you watched my previous comparison video, you saw how clunky the […]
GDAP is the latest Microsoft change that is having many MSPs working overtime to figure out. I’ve been blogging about GDAP for some time so if you are not familiar, please go check out my overview articles before diving in here. Our company, Summit Technology (an MSP out of Salt Lake), recently went through the […]
Many MSPs have been scrambling as of late to get up to speed with GDAP (Granular Delegated Admin Privileges) with Microsoft because of impending deadlines. If you are not familiar with GDAP, please go check out my overview article which also has links to other helpful resources. Microsoft created a tool to bulk migrate traditional […]
