Unify Microsoft 365 Management (Microsoft 101)

This guide details how to integrate and map Microsoft tenants to Syncro, sync Entra ID users, attach curated security baselines for posture management, and configure universal billing for Microsoft licenses.

Watch this short video to see the Microsoft 365 Tenant Management dashboard in action:

Prerequisites

The Microsoft 365 Tenant Management page (Tenant Dashboard) is available to all Syncro Users, with access determined by plan:

• Team & IT Plans: Full access to all features.
• Core Plan: Access limited to the Backup section.

If you're new to Syncro and just setting up your account, be sure to create your Organizations before setting up the Microsoft integration. See Define Your Client Universe: Organizations & End Users and/or Work with Organizations for more information.

Step 1: Integrate with Microsoft

First, you'll connect Syncro to your Microsoft Tenant(s) to establish a communication link. You can integrate with a Single Tenant or a CSP. 

IMPORTANT: 

• If you created multiple Organizations in Syncro and want to do a Single Tenant integration, it's a good idea to Move Multiple Organizations to a Single Syncro Tenant now. (If you work in an IT Department, you're more likely to encounter this situation.)
• If you're integrating with a CSP, be sure to review this important Information for CSP Microsoft integrations.

As an example, here's how you'd integrate with a Single Tenant:

1. Click the Tenants tab.
2. In the upper right corner of the Microsoft 365 Tenant Management page, click Connect Microsoft 365.
3. Select “Connect a Single Tenant.”
4. Select a Syncro Tenant name from the dropdown menu, then click Connect.
5. Log into the desired Microsoft 365 account as a Global Admin. Click Next.
6. Click Accept for the required permissions.

If you'd rather authorize a CSP, see the instructions in Manage Microsoft Tenants. (If you encounter any issues, refer to our Troubleshooting Microsoft Integrations documentation.)

Step 2: Sync Your Users

When you set up Microsoft Entra ID User Sync for each of your Organizations, Syncro can pull your existing users from Microsoft into Syncro as End Users, and keep them synchronized. The User Sync also allows you to take Microsoft-specific user actions—such as resetting a user's MFA or password—directly from Syncro.

To sync your users, follow these steps:

1. Review the Entra ID prerequisites to be sure they're met.
2. On the Microsoft 365 Tenant Management page, find a row where Microsoft 365 Connection is "Enabled" and Entra ID User Sync is "Not Enabled."
3. Click the vertical ellipsis at the far right to open the context menu.
4. Click Enable Entra ID User Sync.

See Set Up Microsoft Entra ID User Sync for more information and an alternative way to do this.

Step 3: Attach a Baseline to Your Tenants

Now you’ll attach a baseline to your Syncro Tenant. The Security Essential Baseline is a Microsoft 365 licensing agnostic Syncro-curated Baseline that enables continuous, daily auditing of your Microsoft environment against industry-aligned security controls. There are several other baselines you might choose from.

To attach a baseline, follow these steps:

1. Review the available baselines so you know which one you want to attach.
2. On the Microsoft 365 Tenant Management page, find a row where Microsoft 365 Connection is "Enabled" and Baseline is "None."
3. Click the vertical ellipsis at the far right to open the context menu.
4. Click Attach a Baseline.
5. Set up Notifications to alert members of your security team to any rule violations.

See Attach or Detach Baselines for more information and an alternative way to do this.  (Bonus: Learn more About Security Posture Management & Baselines or Create & Download an Assessment to share with others.)

Step 4: Use One-Click Actions to Remediate Failed Rules

When your tenants start showing rule violations, Syncro provides two one-click actions for resolving failed security baseline rules: remediation and ticketing.

One-Click Remediation deploys industry best practices to fix security gaps directly within Syncro, reducing manual effort and minimizing the window of vulnerability. One-Click Ticketing converts failed rules into service tickets, ensuring remediation work is captured, tracked, and documented within your workflow.

Watch this short video to learn more:

Once you see some rule violations, use the One-Click Actions for Baseline Rules to process them.   

Step 5: Bill Your Customers for Microsoft Licenses

Note: If you're an MSP and using Syncro's Billing and Invoicing features, Universal Billing for Microsoft is automatically enabled as soon as a Syncro Tenant is mapped to a Microsoft Tenant. 

You can easily charge your customers for Microsoft licenses directly from Syncro after a quick configuration:

1. Navigate to the Invoices tab, then from the Invoices Module menu, select Recurring Invoices.
2. Edit the scheduled invoice for your customer to add a Vendor Usage Counter for Microsoft Products:
   

That's it! You've fully automated billing the Customer Organization for the Microsoft products they use.