M365 Tenant Automation

Configuration Log

⚡

Ready to configure

Enter tenant details and click Start

Target Tenant Domain

🔍

No scan results

Enter a tenant domain and run a discovery scan

First Name *

Last Name *

Display Name

Username (UPN) *

Job Title

Department

Usage Location *

Password

License Groups

Click "Refresh" to load license groups from tenant, or create them below

Quick Create License Group

👤

No users created yet

Fill in the form above and click Create User

Tenant Domains

🌐

Click Refresh to load domains

Add Custom Domain

Add a custom domain to the tenant. After adding, the verification and service DNS records will be displayed automatically.

Set up DKIM signing records Include MDM auto-enrolment records (CNAME)

Target Tenant Domain

📱

Intune Security & Compliance

Scans device management policies, compliance state, MAM/MDM configuration, endpoint security,
and assesses against CE+, NCSC, and CIS benchmarks with one-click remediation.

Target Tenant Domain

✅

CE+ Compliance Scanner

Scans your tenant against all Cyber Essentials Plus requirements

First Time Setup

Quick Setup Wizard

One manual step (60 seconds in Azure Portal), then this tool automates everything else. Azure AD requires an app registration with a valid redirect URI before authentication can work — there's no way around this — but you only need to do it once.

1 Create App Registration in Azure Portal Pending

a. Click the button below to open Azure Portal → App Registrations
b. Click + New registration
c. Name: MSP Tenant Automation (or anything you like)
d. Supported account types: Accounts in this organizational directory only (Single tenant)
e. Redirect URI → Platform: Single-page application (SPA)
f. Redirect URI value — copy this exactly:

Opens in new tab

2 Paste the Client ID & Sign In Pending

After registering, you'll see the Application (client) ID on the overview page. Paste it below. When you sign in, you'll see a consent prompt asking for Directory and Application permissions — accept it (this is what gives the tool permission to configure your tenant).

Client ID (from Azure Portal)

Tenant Domain

3 Auto-Configure Permissions & Consent Pending

Once signed in, this step automatically adds all 15 required Graph API permissions, grants admin consent, and generates a client secret. No manual work.

Required Graph API Permissions Reference

These application permissions are automatically assigned during Step 3. Listed here for reference and audit purposes.