Manage Microsoft Tenants

Syncro’s Microsoft integration helps you streamline your operations while providing better service to the organizations you support. Syncro's integration supports all Microsoft 365 license types.  

The benefits include:

• Linking devices associated with Microsoft Entra accounts directly to Syncro assets, to ensure there's always an assigned End User.
• Quickly finding clients with low Microsoft Secure Scores or those who don't have MFA turned on, to improve security.
• Lowering your client's bills by finding unused Microsoft licenses, and automating client billing based on Microsoft license types.
• Building a foundation for future actions initiated in Syncro to be applied to Microsoft via Microsoft Graph APIs.
• Identifying security gaps and receiving notifications about configuration drift.

This document describes how to manage your Microsoft Tenants in Syncro. 

Prerequisites

• The Syncro-Microsoft integration requires you to be on Syncro's Team or IT plan and be an Administrator in the Syncro account. If you're on Syncro's Core plan, you'll only see the Backup view, and you won't be able to connect new tenants, manage a CSP, or use bulk actions in the Tenants tab.
• You can integrate with a single Microsoft Tenant or all Microsoft Tenants from your Cloud Solution Provider (CSP). 
  IMPORTANT: If you have a CSP, please review the Important Information for CSP Microsoft Integrations before proceeding.
• Access to the Tenants tab is governed through Syncro Security Groups. Viewing tenant health does not require Microsoft Global Admin rights. See also: Security Permissions Reference.

Connect Your Tenants

Use this procedure to connect your Microsoft Tenants, either through authorization of a Cloud Solution Provider (CSP) or as a single tenant.

Steps

1. Click the Tenants tab.
2. In the upper right corner of the Microsoft 365 Tenant Management page, click Connect Microsoft 365.
3. Select “Authorize a CSP” or “Connect a Single Tenant.”

Connect a (CSP) Child Tenant

Note: To connect a (CSP) Child Tenant, you must first authorize a CSP tenant.

1. If it's not already open, click Manage CSP to open the Cloud Solution Providers (CSPs) panel.
2. Click Connect a Child Tenant. The Connect a Microsoft 365 Tenant From Your Authorized CSP window opens:
   
   Tip: You can also select “Connect a CSP Child Tenant” from the Connect Microsoft 365 button. 
3. Select the Microsoft Tenant and Syncro Tenant names from the dropdown menus, then click Connect. A message indicates a successful connection, and depending on your selected view, additional information appears in the table.

Disconnect from Microsoft

You can remove an entire CSP, or disconnect individual Syncro Tenants (e.g., single tenants or child CSP tenants) from Microsoft.

Use the Microsoft Tenant Management Dashboard

The Tenants tab displays the Microsoft 365 Tenant Management dashboard: a single, sortable table of every Syncro Tenant, whether or not it's connected to Microsoft. It's also the place to connect and manage all your Microsoft 365 tenants.

Customize & Change Views 

The Custom View of the table is selected by default. For new accounts, this Custom View shows all your Syncro Tenants sorted alphabetically. However, any connected Tenants with critical errors and warnings are automatically moved to the top so you can quickly identify and fix issues. Critical errors appear in red at the top, followed by warnings in yellow, then the remaining tenants alphabetically. The other rows shown include: 

• Customer Organization,
• If connected, the Microsoft Tenant and status of the Microsoft 365 connection,
• The Entra ID User Sync and Backup status, and
• The baseline currently attached to the tenant.

Tips: 

• Click the gear () icon in the upper right corner of the table to select which columns are visible in the Custom View. You can also drag and drop columns into the order you want. Column visibility and column order persist on your local device. You can also pin columns in the table to suit your needs. See: About Tables in Syncro.
• Hover over a status column to see detail about that tenant's status without opening a new screen.
• Click a cell link in a tenant's row to jump directly to that tenant's end user list or baseline compliance detail.

You can toggle from your Custom View to two others:

• Backup: When Cloud Backup is activated, shows the Syncro Tenant, Customer Organizations, Microsoft Tenant, Backup Status, Last Backup (date/time), Entra ID Users Backing Up, Backup Services, and Backup Billing Users. See Dashboard Column Reference for descriptions.
• Microsoft 365: Shows the Syncro Tenant, Customer Organizations, Microsoft Tenant, Authorizing User, Microsoft 365 Connection, Entra ID users, Entra ID User Sync, Last Tenant Sync, and attached Baseline columns. See Dashboard Column Reference for descriptions.

Locate a Syncro Tenant

To filter the table of Syncro Tenants to more easily find the one you want, type your criteria in the field to the right of the view toggles, then press Enter. The table shows only the matching results:

Click the X in the search bar to see the full list of Syncro Tenants.

Bulk Update Multiple Tenants

To perform actions on multiple Syncro Tenants, follow these steps:

1. Check the boxes next to one or more rows in the Tenant Management table. The Bulk Actions button menu is enabled.
   
2. Click Bulk Actions, then select from one of the following actions: 
   
   • Export CSV: Downloads a single CSV file containing the data displayed in the table as it is currently displayed.
   • Attach a Baseline: Opens a window where you can select an available baseline to attach to the selected Tenants. (See also: Attach or Detach Baselines.)
   • Detach a Baseline: Opens a window where you can confirm the removal of the currently attached baseline from the selected Tenants. (See also: Attach or Detach Baselines.)
   • Export Baseline Assessment Reports: Downloads baseline assessment report PDFs for the selected Tenants.
   • Enable Entra ID User Sync: Opens the “Enable Microsoft Entra ID User Sync” window so you can Set Up Microsoft Entra ID User Sync for the selected Tenants.
   • Disable Entra ID User Sync: Opens a window where you can confirm that you want to disable Entra ID User Sync for the selected Tenants.

After a bulk action completes, a notification reports how many tenants succeeded and identifies any that failed. Failed tenants retain their prior state and remain individually actionable.

Dashboard Column Reference

Here's a description of each column possible for the Microsoft 365 Tenant Management table. What's shown depends on your selected view. *Custom View can be modified; what's shown is the default for new accounts.

Context Menu Reference

Each Syncro Tenant in the Microsoft 365 Tenant Management table has a context menu, which you access via the ellipsis at the far end of the row. The options in the menu don't change based on your view, but DO change depending on what you already have configured. The context menu is divided into the sections and provides the following options:

Syncro Cloud Backup

Microsoft 365

Manage a CSP

After you've connected at least one CSP, the Manage CSP button appears so you can manage them. Clicking it displays the Cloud Solution Providers (CSPs) panel, from which you can Authorize a CSP, Connect a (CSP) Child Tenant, Reauthorize a CSP, or Remove a CSP. 

Authorize Another CSP

Use this procedure to authorize a CSP after you already have one. 

1. Click Manage CSP. The Cloud Solution Providers (CSPs) panel opens.
2. Click Authorize a CSP.
3. Be sure you've met the Prerequisites, which are shown in a pop-up window. 
4. Check the box, then click Continue. 
5. Log into your CSP Microsoft 365 Tenant using an appropriately privileged Global Admin account. 
   Note: If you want a Single Tenant integration, you'll need to create Global Admin accounts on the individual Microsoft 365 Tenants you want to integrate. (These must be different from your CSP Microsoft 365 Tenant credentials.)
6. Click Accept for the required permissions. The CSP appears in the Cloud Solution Providers (CSPs) panel.
7. Connect a Child Tenant.

Reauthorize a CSP

Use this procedure to reauthorize a CSP that is showing an Auth Error in the Microsoft 365 Connection column:

1. Click Manage CSP. The Cloud Solution Providers (CSPs) panel opens.
2. Click the Reauthorize button associated with the CSP:
   
3. Log into the desired Microsoft 365 account as a Global Admin. Click Next.
4. Click Accept for the required permissions. The Cloud Solution Providers (CSPs) panel opens. An “Auth Pending” state appears for a moment.
5. Once the authorization is complete, the status changes to Authorized.

Tip: You can also click the ellipsis context menu for the row and select “Manage CSP.”