Skip to main content

Seamless M365 integration with end-client tenants via GDAP

Feature RequestIntegration

Connect Neo Agent to your end-client Microsoft 365 tenants using Granular Delegated Admin Privileges (GDAP). This enables the agent to manage users, licenses, mailboxes, and Active Directory across all your clients — without requiring per-tenant credentials or separate app registrations.

Key capabilities:

  • Single consent flow for MSPs to grant Neo access via GDAP
  • Manage M365 users, groups, licenses, and mailboxes across client tenants
  • Active Directory operations (password resets, group membership, account management)
  • Exchange administration (mailbox permissions, distribution lists, transport rules)
Posted by Ryan ·
Status: Completed2 comments

Log in to comment and vote

Comments2

  • Ricky Cobb

    •

    Jun 17

    This would be VERY useful for us as an MSSP…could use right away thanks!

  • Greg Wenner

    •

    May 23

    This would be really useful, especially at scale. Individually signing into client tenants becomes pretty time consuming once you’re managing more than a handful.

    CIPP handles this really well already using GDAP, and I’d suggest leaning on the same role structure they use. Most MSPs already have those roles in place, so it tends to reduce friction during onboarding.

    Here’s the reference for the recommended CIPP roles: https://docs.cipp.app/setup/maintaining-cipp/recommended-roles

    I’d probably keep it simple and just select a smaller subset of those roles that still covers the core admin workflows, rather than trying to include everything upfront.