Traditionally, both distributors (Microsoft Indirect Providers/CSP Tier 1s) and MSPs (Indirect Resellers) have established Delegated Admin Privileges (DAP) with all downstream customers. This allows distributors to license customer tenants and provide support. It allows you, as the MSP, to provide support and perform day to day management tasks via Partner Center. 

The large security concern is that Delegated Admin Privileges (DAP)  give you the keys to the kingdom (aka Global Admin Access) to all downstream customers. That means if you are compromised (or your distributor is compromised), all of your customers might be compromised as well. These vulnerabilities are exploited in what is known as supply chain attacks. We’ve been experiencing more significant supply chain attacks over the past few years (most notably, Nobelium.)

In order to combat these attacks, Microsoft is introducing some new features to help you monitor these relationships. In 2022 the community as a whole will begin to shift from DAP relationships to GDAP relationships (as I outlined in a previous blog post) which allow for a model of least privilege. The first phase of this transition is providing more granular reporting on DAP relationships you have today in efforts to prepare to transition customers to GDAP. In this article, I will simply be covering where these reports are located within Partner Center and what kind of reporting is provided.