Audit
We get administrator access and review the whole environment: users and their licences, groups, SharePoint sharing, mail rules, administrator accounts and Secure Score. You receive a prioritised report that you can use even without us.
Microsoft 365 administration
We take over the day-to-day administration of your Microsoft 365 tenant: users and licences, Teams and SharePoint permissions, mail rules, Secure Score and review of Microsoft changes. You get a tidy environment, a clear monthly report and a helpdesk that responds from 30 minutes.
Built for ISO 27001NIS2 DORA
- User lifecycle
- Licence management
- Groups and Teams
An environment someone looks after every day, not once a year
- from 30 min. helpdesk response to a request
- 1 d. d. account created or closed after a request
- monthly licence and Secure Score review
- 1 report for management: usage, changes, risks
Microsoft 365 is easy to set up and even easier to leave unattended. After a year or two, in a typical company we see the same picture: licences assigned to employees who left long ago, mailboxes forwarded to personal addresses, SharePoint sites shared with the whole organisation because it was simpler, and an administrator account without MFA used for daily work. Meanwhile Microsoft changes settings every month, disables old protocols and introduces new features, announced in a Message Centre that nobody reads.
Microsoft 365 administration is an ongoing service in which our engineers look after your tenant according to an agreed procedure. We manage the user and licence lifecycle from hiring to leaving, groups and Teams teams, SharePoint and OneDrive permissions, Exchange mail rules and external sharing policies. Every month we review licence usage and Microsoft Secure Score, assess the changes Microsoft has announced and tell you which ones affect you. Employee questions about Outlook, Teams or OneDrive are handled by the helpdesk, and management receives a report showing what is used, what has changed and where risk remains. All changes are logged in the ticketing system, so a year later you can trace who granted access to a particular site or mailbox, when, and at whose request. ISO 27001 and NIS2 auditors ask for exactly that.
What is included
Day-to-day tasks that we perform under the agreed procedure and record in the ticketing system.
User lifecycle
A new employee's account, licence, groups and Teams teams within one business day. When someone leaves: access blocked, mailbox and OneDrive handed to the manager, licence released.
Licence management
Every month we check which licences are unused or assigned to a plan that is too high, and we change them through the MDP CLOUD CSP agreement with no long commitment.
Groups and Teams
We create and manage Microsoft 365 groups, Teams teams and channels, define who can create new teams, and archive unused ones.
SharePoint and OneDrive permissions
Site structure, owners and members, sharing link expiry, and a quarterly review of external guest access.
Exchange mail rules
Shared mailboxes, distribution groups, forwarding and transport rules, and SPF, DKIM and DMARC records so that emails do not end up in spam.
Secure Score and changes
We track Microsoft Secure Score and Message Centre announcements, assess which changes affect you, and roll them out once agreed.
Helpdesk for employees
Outlook, Teams, OneDrive and SharePoint questions are resolved remotely, with a response from 30 minutes during working hours.
Report to management
Every month: number of users and licences, changes made, security events, Secure Score change and recommendations for the next month.
Without administration and with MDP CLOUD administration
The same situations we see in almost every environment we take over.
| Without administration | With MDP CLOUD administration | |
|---|---|---|
Employee leaving | account stays active, mail is still reachable from the phone | access blocked the same day, mail and files handed to the manager, licence released |
Unused licences | you pay for every account ever created | reviewed monthly, unused licences cancelled or reassigned |
Secure Score | nobody looks, the score drops with every Microsoft change | tracked monthly, recommendations implemented by priority |
Changes from Microsoft | you find out when something stops working | Message Centre assessed in advance, changes agreed and prepared |
SharePoint permissions | "Everyone" has access to everything, links never expire | sites have owners, permissions reviewed quarterly, links with expiry dates |
Administrator account | one shared account, no MFA, used for daily work | separate named accounts with MFA, used only for administration |
Employee question | asked of a colleague, or waits until someone remembers IT | logged in the helpdesk system, response from 30 minutes |
Report to management | none | monthly, with licences, changes and risks |
How we take over the environment
Usually within 2-3 weeks, without interrupting employees' work.
Cleaning up
We close the accounts of former employees, cancel unneeded licences, introduce MFA for administrators and sort out external sharing. Every change is agreed with you so that nobody unexpectedly loses access.
Agreeing the process
We agree who on your side can order a new account or permissions, how departures are reported, which standard licence bundles apply to which roles, and the deadlines. The procedure is recorded in writing and binds both sides.
Ongoing administration
From then on we work to the agreed procedure: the helpdesk handles requests, engineers review licences, Secure Score and Microsoft changes every month, and you receive a report and recommendations.
Administration does not include backups
Microsoft protects the platform but does not restore deleted emails and files after the retention period. Microsoft 365 backup is a separate service, most often ordered together with administration.
Frequently asked questions
Can you take over an environment set up by another partner?
Yes. All we need is Global Administrator access. We start with an audit, and if the licences were bought through another CSP partner, we can move them to an MDP CLOUD agreement without interrupting service.
How does administration differ from the Microsoft 365 security service?
Administration is the day-to-day order: users, licences, permissions, mail rules, Secure Score tracking and baseline measures such as MFA. Conditional Access, Defender, Intune and DLP policy design are described separately on the Microsoft 365 security page and depend on your licence.
Do we need our own IT employee?
No. For most companies up to 300 users it is enough to have one responsible person on your side who approves requests and decisions. If you do have an IT employee, we work together: they remain the owner and we do the work.
What does the manager of a departing employee receive?
Under the agreed procedure, the mailbox is converted to a shared mailbox and assigned to the manager, OneDrive files are moved to their or the department's SharePoint site, and ownership of Teams teams is transferred. The account itself is blocked on the day of departure and the licence is released.
Does administration also cover Microsoft 365 Copilot?
Yes, if you have Copilot licences: we assign them, manage access to the data Copilot can see, and review overly broadly shared sites, because those are exactly what Copilot exposes first. Deployment and training are described on the Microsoft 365 Copilot page.
Related services
Microsoft 365 licences
We select and supply Microsoft 365 licences as a Microsoft CSP partner: Business Basic, Standard, Premium and Enterprise plans and the Copilot add-on.
Microsoft Viva
We turn on and configure Microsoft Viva apps in your Microsoft 365 tenant: an employee portal in Teams, communities, learning, surveys and…
Microsoft 365 migration
We migrate mail, calendars, contacts and files to Microsoft 365 from Google Workspace, on-premises Exchange, IMAP hosting or another Microsoft 365…
Microsoft 365 security
Most incidents in companies start with a forged email or a stolen password.
Expertise confirmed by certifications
This service is delivered by specialists with valid international certifications. Their expertise is confirmed by independent organisations, not by us.
-
Lead Cloud Security Manager
Cloud security is managed following ISO/IEC 27017 and 27018 practices.
-
Certified Information Security Manager
Security governance, policies and incident processes following the ISACA methodology.
Get a quote for Microsoft 365 administration
Tell us how many users you have and which plans you use, and we will send a quote with the scope of the initial audit within 1 business day.
We reply within 1 business day