Multi-Tenant Permissions
Muti-Tenant Management (MSP)
Multi-Tenant Permissions
Required permissions for multi-tenant management including Partner Center and GDAP access
Multi-Tenant Permissions
https://docs.intuneassistant.cloud/docs/msp/permissions/#multi-tenant-permissions
Learn about the specific permissions required for MSPs to manage multi-tenant environments, including Partner Center integration and GDAP relationship management.
Overview
https://docs.intuneassistant.cloud/docs/msp/permissions/#overview
MSP multi-tenant management requires additional permissions beyond standard Intune management to support Partner Center integration, GDAP relationship access, and cross-tenant operations.
Required MSP Permissions
https://docs.intuneassistant.cloud/docs/msp/permissions/#required-msp-permissions
Partner Center Access Permissions
https://docs.intuneassistant.cloud/docs/msp/permissions/#partner-center-access-permissions
For MSP multi-tenant functionality, your MSP account requires:
DelegatedAdminRelationship.Read.All
Application
Read GDAP relationships and partner tenant information
Special Permission Notice
Please contact support if you want to enable this permission for your MSP account.
Partner Center Authentication
https://docs.intuneassistant.cloud/docs/msp/permissions/#partner-center-authentication
Your MSP account must have:
Partner Center access with appropriate role assignments
Ability to view partner tenants in the Partner Center portal
GDAP relationship management permissions
Multi-tenant app registration in your home tenant
Partner Center Requirement
You must be able to login to Partner Center and view partner tenants for the multi-tenant functionality to work properly.
Standard Permissions
https://docs.intuneassistant.cloud/docs/msp/permissions/#standard-permissions
In addition to Partner Center permissions, each managed tenant requires a set of standard Microsoft Graph API permissions for Intune management. The basic Intune Assistant permissions can be found on the needed permissions page.
After onboarding new customer (see add tenant), the correct permissions are set up automatically. When adding a tenant, the Intune Assistant license is added to the tenant, and the required API permissions are consented. When adding an extra license, a consent prompt is shown to consent the required permissions.
Related Documentation
Permission Foundation
Proper permission setup is the foundation for successful MSP multi-tenant management. Take time to configure these correctly for optimal security and functionality.
https://docs.intuneassistant.cloud/docs/msp/overview/ Multi-Tenant Overview How Intune Assistant supports MSPs with GDAP-enabled multi-tenant management
https://docs.intuneassistant.cloud/docs/msp/license-management/ License Management How to add and remove licenses for customer tenants in your MSP environment