M365Con 2027 – free online conference · 11–22 Jan 2027 · 120 sessions→ m365con.net

Blog · Mirko Peters

How to manage multiple tenant accounts in Microsoft 365

By · · Updated

Efficiently manage multiple tenant accounts in Microsoft 365 with practical strategies for switching, permissions, security, and billing.

Managing multiple tenant accounts in microsoft 365 can become complex quickly. Many organizations face challenges like:

About 70% of organizations report a heavier management burden when handling multiple tenants. You must handle permissions, security, and switching efficiently to avoid errors and risks. This guide helps you manage multiple tenant accounts in m365 with practical solutions and microsoft tools.

Key Takeaways

Manage multiple tenant accounts: switch tenants

Using the Microsoft 365 admin center

Switching between multiple tenant accounts in Microsoft 365 can be seamless when you utilize the Microsoft 365 admin center. This tool offers a tenant switcher that allows you to quickly navigate between the tenants you manage. Here are some key features that enhance your tenant management workflows:

The unified interface of the admin center allows you to move swiftly between managed tenants. This efficiency improves your navigation and helps you stay organized. You can also access an all tenants page, which provides a consolidated view of service health, license usage, and user counts.

Feature

Benefit

Unified interface

Allows quick movement between managed tenants, enhancing navigation efficiency.

All tenants page

Provides a consolidated view of service health, license usage, and user counts.

Service health view

Aggregates incidents and advisories, enabling efficient monitoring of tenant issues.

Pinning tenants

Facilitates faster access to frequently used tenants, streamlining administrative tasks.

Using browser profiles for multiple accounts

Another effective method to manage multiple Microsoft 365 tenants is by using browser profiles. This approach allows you to handle different accounts simultaneously without the need to log in and out repeatedly. Here’s how to set up browser profiles for managing your accounts:

  1. Open Windows Settings.

  2. Navigate to Accounts and select Email & accounts.

  3. Click on 'Add workplace or school account' and follow the prompts using your admin account.

  4. Create a second Edge profile for your admin account.

  5. Launch the browser with the second Edge profile to access Microsoft 365, where you can choose between your standard and admin accounts.

While browser profiles can simplify access, they do come with some limitations. Users often report difficulties in switching profiles effectively. The browser may default to the account signed in to Windows, leading to confusion. Additionally, some users express frustration over automatic sign-ins to the wrong account, which complicates the management of multiple Microsoft 365 tenant accounts.

Manage multiple tenant accounts: permissions and collaboration

Setting user roles

Managing user roles across multiple tenant accounts in Microsoft 365 is crucial for maintaining security and ensuring effective collaboration. You can assign different roles to users based on their responsibilities. Here are some key roles you should consider:

By assigning appropriate roles, you can control access to resources and data effectively. This approach helps you maintain compliance with organizational policies while facilitating collaboration.

Tip: Regularly review user access and privileges to ensure they align with current roles. This practice minimizes risks and enhances security.

Setting up multitenant organizations

Creating a multitenant organization in Microsoft 365 allows you to share resources and collaborate more effectively across different tenants. Follow these steps to set up a multitenant organization:

  1. Sign in to the Microsoft 365 admin center as a global administrator.

  2. Expand Settings and select Org settings.

  3. On the Organization profile tab, select Multitenant collaboration.

  4. Select Get started.

  5. Choose Create a new multitenant organization, then select Next.

  6. Enter a name and description for the multitenant organization.

  7. Input the tenant IDs of any tenants you want to invite.

  8. Select Next.

  9. Enable options to allow users to sync into this tenant and suppress consent prompts for users from other tenants.

  10. Select Next and then Create multitenant organization.

  11. Copy the instructions for joining the multitenant organization and email them to a global administrator in each invited organization.

  12. Select Done.

Setting up a multitenant organization offers several benefits, including:

However, be aware of common challenges, such as complex setup processes and issues with user provisioning. Addressing these challenges early can help streamline your tenant management efforts.

Note: Establish a governance plan to define roles, responsibilities, and policies for data management and security. This plan will help you manage permissions effectively across multiple client tenants.

Manage multiple tenant accounts: security best practices

Manage multiple tenant accounts: security best practices Image Source: unsplash

Multi-factor authentication

Implementing multi-factor authentication (MFA) is essential for securing your Microsoft 365 tenant accounts. MFA adds an extra layer of protection by requiring users to verify their identity through multiple methods. Here are some recommended practices for MFA:

To enable MFA, access the Office 365 admin portal and select the admin accounts to enable MFA for. Use Azure AD Conditional Access to create policies that require MFA for all users in admin roles.

Security audits

Conducting regular security audits is vital for maintaining the integrity of your tenant management. These audits help identify vulnerabilities and ensure compliance with security policies. Tools like AdminDroid Office 365 Reporter simplify the management of multiple tenants. This tool allows you to manage tenants from a single portal, providing functionalities such as tenant-based delegation and real-time reporting.

Tool

Key Features

AdminDroid

- Multi-tenant management in a single portal.

 

- Tenant-based delegation for user access.

 

- Over 950 pre-built Office 365 reports for various services.

Nerdio

- Comprehensive Commercial Cloud RMM for multi-tenant management.

 

- Enterprise-grade reliability and security.

Regular audits help you maintain consistent security policies across tenants. They also assist in identifying insider threats and privilege abuse, which can lead to significant damage. By implementing these security best practices, you can enhance your tenant administration and protect your organization from potential risks.

Manage multiple tenant accounts: consolidation and billing

Tenant consolidation overview

When organizations undergo mergers or acquisitions, tenant consolidation becomes essential. You must plan thoroughly to ensure a smooth transition. Here are some key considerations for successful tenant consolidation:

Tenant consolidation offers several benefits, such as improved communication and reduced licensing costs. However, it also presents risks, including increased chances of data breaches and unauthorized access if permissions are not managed carefully.

Aspect

Benefits

Risks

Cost

Reduces licensing fees and operational costs, freeing IT resources and improving efficiency.

N/A

Efficiency & Collaboration

Improves communication and collaboration by unifying tools and data across employees.

N/A

Data Governance & Compliance

Simplifies regulatory compliance and strengthens data governance across the organization.

N/A

Security

Reduces attack surface and enhances protection.

Increased risk of data breaches if mishandled.

Managing billing accounts

Managing billing across multiple tenants in Microsoft 365 can streamline your financial operations. You can choose between single-tenant and multi-tenant billing accounts. Here’s a quick comparison:

Billing Area

Single-Tenant Billing Accounts

Multi-Tenant Billing Accounts

Invoicing

Different invoices for each tenant.

Same or different invoices based on choice.

Managing Purchases

Subscriptions used only in the purchasing tenant.

Subscriptions can be created in different tenants sharing the billing account.

Agreements

Each tenant signs its own agreement.

Single agreement applies to all tenants sharing the billing account.

Pricing and Discounts

Discounts not shared unless terms are shared.

Discounts applied across billing accounts regardless of tenant.

Visibility

Users see only their own billing account information.

Users see the same billing account information across tenants.

Security

Users follow their own tenant's security policies.

Users follow their own tenant's security policies even when sharing a billing account.

To streamline billing processes, consider automating billing tied to actual usage. This approach reduces manual errors and enhances efficiency. You can also consolidate or split invoices based on customer needs, ensuring flexibility in your billing strategy.

Tip: Overcommunicate with end users during the consolidation process. This helps manage cultural and operational changes effectively.

Manage multiple tenant accounts: MSP tools and centralized management

Microsoft 365 Lighthouse overview

Microsoft 365 Lighthouse serves as a powerful tool for Managed Service Providers (MSPs). It provides a centralized interface to manage multiple tenants effectively. With Lighthouse, you can secure and oversee devices, data, and users across various small and medium-sized business (SMB) clients. This centralized management capability enhances security and offers visibility across different tenants. Here are some key features of Microsoft 365 Lighthouse:

Using Microsoft 365 Lighthouse, you can delegate roles and monitor incidents across multiple workspaces. This capability simplifies your administrative tasks and improves overall efficiency.

Feature

Description

Role Delegation

Allows delegation of Azure roles and access to various admin centers.

Centralized Monitoring

Enables viewing and managing incidents from a single location.

Automation Capabilities

Facilitates performing tasks at scale using PowerShell and Microsoft Graph API.

Security Groups

Simplifies permission management by creating groups for different roles.

Conditional Access Policies

Enforces security measures like MFA for accessing resources.

Privileged Identity Management (PIM)

Provides just-in-time access to delegated permissions.

Third-party management tools

In addition to Microsoft 365 Lighthouse, several third-party tools can help you manage multiple tenants in complex environments. These tools often provide advanced features that enhance your management capabilities. Here are some common options:

Third-party tools excel at user and license management, security policy deployment, and monitoring configuration drift. While community tools may be free, they can incur hidden costs, such as Azure consumption and maintenance efforts. By leveraging these tools, you can streamline access to resources and improve administrative efficiency across your tenants.

Managing multiple tenant accounts in Microsoft 365 can be streamlined by adopting effective strategies. Focus on the following key areas:

For further reading, consider resources like The Definitive Guide to Microsoft 365 Tenant Administration & Management and Managing Multiple Tenants in Azure AD. These will deepen your understanding and help you optimize your management of multiple tenant accounts.

FAQ

How can I switch between multiple tenants in Microsoft 365?

You can switch tenants using the Microsoft 365 admin center's tenant switcher. This feature allows you to navigate between your managed tenants quickly and efficiently.

What roles should I assign to users across tenants?

Assign roles based on responsibilities. Common roles include Global Administrator for full access and User Administrator for user management. Ensure you regularly review these roles for compliance.

How does multi-factor authentication enhance security?

Multi-factor authentication (MFA) adds an extra layer of security by requiring users to verify their identity through multiple methods. This significantly reduces the risk of unauthorized access to your tenants.

What are the benefits of tenant consolidation?

Tenant consolidation simplifies management during mergers or acquisitions. It improves communication, reduces licensing costs, and enhances data governance across your organization.

What tools can help manage multiple tenants effectively?

Microsoft 365 Lighthouse provides centralized management for MSPs. Additionally, third-party tools like AdminDroid offer advanced features for managing multiple tenants efficiently.

Microsoft 365 admin center Microsoft 365 SharePoint OneDrive Custom domain in Microsoft 365 Multifactor authentication (MFA)

RSS