Run your customers' Microsoft 365 from one place.
One console for every customer tenant: scoped technician access, approved changes with a receipt for each one, and reports your customers can read.
One organisation? Start with the Free plan for one Microsoft 365 tenant.
TenantVigil only reads your Microsoft 365 tenant. It never changes a setting: you apply each fix yourself.
Harbor IT
Fleet
1
Requests past their reply target
1
Customers with stale or partial scans
- Contoso Dental2Current
- Fabrikam Legal1Current
- Northwind Freight0PartialNot read
Scan status shows freshness, not a security score.
A day in the console
Follow one example customer from the fleet to assigned work, a change receipt and a report.
Open work
- Add a new technician to the billing groupRiley ChenIn progress
- Answer a support request from the front deskUnassignedOpen
Contoso Dental
Assigned work
Add a new technician to the billing group
3
Review the change
Stage the exact change, check it and request scoped approval. Once the required Microsoft setup is complete, approved changes run through a customer-bound broker and record what was attempted and what Microsoft returned.
Explore changesContoso Dental
Change plan
Add group member
Alex Rivera → Billing reviewers
Awaiting approval
Microsoft accepted the request
Today 14:02
Applied; not verified
4
Show the customer
Produce a branded service report and a stored evidence pack with a freshness receipt.
Explore reportsContoso Dental
Security evidence pack
Produced by Harbor IT
Fresh 12 Oct 2026
2 reads
- MFA enforced for administratorsPass
- Legacy authentication blockedFail
- Guest access reviewNot read
What changes for your team
The problems that grow with every customer you add, and how the console handles them.
Technicians have more access than they need.
Admins see the MSP's customers and members see only assigned ones. Each person sees only what their grants allow, and access ends when a person is suspended.
Explore accessNobody can prove what a change did.
Stage exact plans with safety checks and scoped approval. After Microsoft setup, a record of what was attempted and what Microsoft returned; unclear outcomes are recorded and never resent.
Explore changesSettings drift back after you fix them.
Compare each customer with its approved baseline; review differences before supported changes.
Explore desired stateShowing customers your value takes hours.
Branded service reports and evidence packs with freshness receipts, and customers log in to see their tickets.
Explore reportsSecurity alerts arrive with no context.
Investigate customer-scoped Defender incidents. After Microsoft setup and independent approvals, isolate supported devices; approve release separately.
Explore security operationsIt has to fit the tools you already run.
Connect Autotask with your API credentials, or use the scoped partner API and signed webhooks.
Explore integrationsBefore and with TenantVigil
Before
Sign in to each customer's admin centre
With TenantVigil
Open the customer from the fleet
Before
Shared admin accounts
With TenantVigil
Per-person, per-customer access
Before
Change history in a ticket note
With TenantVigil
Plan, approval and Microsoft's response on record
Before
Hand-built QBR slides
With TenantVigil
Branded reports and evidence packs from stored scan results
Before
Alerts with no customer context
With TenantVigil
Defender incidents per customer with scoped evidence
What the console records
90+ security checks
Read a customer's Microsoft 365 configuration and report check results.
7 framework mappings
Map findings to the framework families below.
A record of each write
See what was attempted and what Microsoft returned.
Access by customer
Show each person only the customer data their current grants allow.
CIS Microsoft 365 Benchmark, CISA SCuBA, SOC 2, ISO 27001, HIPAA, NIS2, GDPR
These are framework mappings, not certifications held by TenantVigil.
From sign-up to customer work
- 1
Start your MSP account.
Use Start as an MSP, or speak to the team through the assisted route.
- 2
Connect a customer.
A customer administrator completes Microsoft consent to link the tenant.
- 3
Review the first scan.
Read the customer's findings and scoped inventory.
- 4
Run the service.
Assign customer work, review change plans and produce reports.
Native changes need their Microsoft permissions and registered callbacks before use. Some SharePoint checks and Microsoft 365 Backup workflows need additional setup.
Choose a plan for the customers you manage
Start with one tenant on Free, or use MSP Provider for up to 10 customer tenants.
MSP Provider
Billed annually
For up to 10 customer tenants in one MSP console.
Start as an MSP- Customer work and technician queues.
- Scoped staff access.
- Exact change plans and receipts.
- Branded service reports and evidence packs.
- Scoped API and signed webhooks.
Native changes require the relevant Microsoft setup before use.
More than 10 customers? Contact sales.
Before you connect a customer
Who on my team can see each customer?
MSP admins see the customers the MSP owns. Members see only assigned customers, and each person's data follows their current grants.
Who gives Microsoft consent?
A real customer administrator consents before the tenant is linked. Native changes need their Microsoft permissions and registered callbacks; some SharePoint checks and Backup workflows need additional setup.
Does TenantVigil change my Microsoft 365 tenant?
TenantVigil only reads your Microsoft 365 tenant. It never changes a setting: you apply each fix yourself.
How are changes approved and recorded?
Changes are staged as exact plans with safety checks and scoped approval. Once the required Microsoft setup is complete, approved changes run through a customer-bound broker and record what was attempted and what Microsoft returned.
Which Exchange changes remain manual?
A technician makes mail forwarding, FullAccess, SendAs, distribution-list membership and unsupported organisation-setting changes manually, then reports back.
Can I start with one organisation?
Yes. Sign up for the Free plan for one Microsoft 365 tenant, with a security score and top findings.
What does MSP Provider cost?
MSP Provider is $799 per month, billed annually, for up to 10 customer tenants. For more than 10, contact sales.
Where can I check data location and handling terms?
Read the Privacy Policy and Data Processing Agreement, and contact us about any data-location requirement before you connect customers.
Start with your next customer
Connect a customer with administrator consent, then review the findings and service work in your console.
Free starts with one Microsoft 365 tenant.