# Multi-Tenant Permissions

Muti-Tenant Management (MSP)

## Multi-Tenant Permissions

Required permissions for multi-tenant management including Partner Center and GDAP access

## Multi-Tenant Permissions

<https://docs.intuneassistant.cloud/docs/msp/permissions/#multi-tenant-permissions>

Learn about the specific permissions required for MSPs to manage multi-tenant environments, including Partner Center integration and GDAP relationship management.

### Overview

<https://docs.intuneassistant.cloud/docs/msp/permissions/#overview>

MSP multi-tenant management requires additional permissions beyond standard Intune management to support Partner Center integration, GDAP relationship access, and cross-tenant operations.

### Required MSP Permissions

<https://docs.intuneassistant.cloud/docs/msp/permissions/#required-msp-permissions>

#### Partner Center Access Permissions

<https://docs.intuneassistant.cloud/docs/msp/permissions/#partner-center-access-permissions>

For MSP multi-tenant functionality, your MSP account requires:

| Permission                            | Type        | Purpose                                                |
| ------------------------------------- | ----------- | ------------------------------------------------------ |
| `DelegatedAdminRelationship.Read.All` | Application | Read GDAP relationships and partner tenant information |

{% hint style="info" %}
Special Permission Notice

Please contact support if you want to enable this permission for your MSP account.
{% endhint %}

#### Partner Center Authentication

<https://docs.intuneassistant.cloud/docs/msp/permissions/#partner-center-authentication>

Your MSP account must have:

* **Partner Center access** with appropriate role assignments
* **Ability to view partner tenants** in the Partner Center portal
* **GDAP relationship management** permissions
* **Multi-tenant app registration** in your home tenant

{% hint style="warning" %}
Partner Center Requirement

You must be able to login to Partner Center and view partner tenants for the multi-tenant functionality to work properly.
{% endhint %}

#### Standard Permissions

<https://docs.intuneassistant.cloud/docs/msp/permissions/#standard-permissions>

In addition to Partner Center permissions, each managed tenant requires a set of standard Microsoft Graph API permissions for Intune management. The basic Intune Assistant permissions can be found on the [needed permissions](/security-and-compliance/needed-permissions.md) page.

After onboarding new customer (see [add tenant](broken://pages/b1de3e1808839ff9ac2a87daf5ab456639ef0d7b)), the correct permissions are set up automatically. When adding a tenant, the Intune Assistant license is added to the tenant, and the required API permissions are consented. When adding an extra license, a consent prompt is shown to consent the required permissions.

### Related Documentation

* [Add Tenant](/extensions/msp-support/tenant-management.md)
* [Switch Tenants](/extensions/msp-support/switch-tenants.md)
* [License Management](/extensions/msp-support/license-management.md)
* [GDAP Introduction](https://learn.microsoft.com/en-us/partner-center/customers/gdap-introduction)
* [Partner Center Role Management](https://learn.microsoft.com/en-us/partner-center/permissions-overview)

{% hint style="info" %}
Permission Foundation

Proper permission setup is the foundation for successful MSP multi-tenant management. Take time to configure these correctly for optimal security and functionality.
{% endhint %}

* <https://docs.intuneassistant.cloud/docs/msp/overview/\\>
  Multi-Tenant Overview\
  \
  How Intune Assistant supports MSPs with GDAP-enabled multi-tenant management
* <https://docs.intuneassistant.cloud/docs/msp/license-management/\\>
  License Management\
  \
  How to add and remove licenses for customer tenants in your MSP environment


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.intuneassistant.cloud/extensions/msp-support/multi-tenant-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.