3 - Configure Microsoft 365 partner admin account

To access your tenant list and license details, you need to connect Sync 365 to your Microsoft Partner Center. 

We recommend creating a specific account (e.g., S365@<yourtenant>) with Admin Agent permissions to your customer accounts.
If you use custom security groups to apply your GDAP permissions, this account will need to be in one that has Application Administrator and Global Reader permissions.

Once you have an account that can access your customer tenants via the Partner Center, you can grant consent to Sync 365 to automate your Microsoft 365 billing.

Step 1: Create or Use an Admin Account

If you already have an account to use, skip to Step 2 below.

To assign an account the proper permissions, refer to the Microsoft Partner Center Permissions Overview, or follow these steps:

1. Log in to the Partner Center using an account with Global Admin rights.

2. Click the settings cog in the top right and select Account Settings.

3. Select User Management on the left.

4. Choose the user you want to assign permissions to.

5. Set the permission for "Assists your customers as" to Admin Agent 

6. Update the account.

7. Log in to the Partner Center in an incognito browser window to verify that the account has MFA (Multi-Factor Authentication) enabled. The account must prompt for MFA on login; otherwise, it will be rejected by the Microsoft Partner Center.

8. Verify Access: Ensure you can see the customer list with this account. Also, add this service account to the relevant GDAP Security Groups (which must have at least Global Reader and Application Administrator permissions or higher).

   1. The account should be able to access the customer's azure AD and see the users and licenses

Step 2: Add Your Account to Sync 365

1. From your Sync 365 License dashboard, navigate to the Customers tab.

2. Click the Delegated Admin tab.
   

3. Click on Add > “Grant Partner Center Consent”
   

4. You will be prompted to log in to Office 365 using the Partner Center account created in Step 1.

   1. You may need a Global Admin to approve the app if restricted in your environment.

   2. Ensure you are prompted for MFA during this process, otherwise Microsoft will block the connection.

      1. Select "Consent on behalf of your organization"
      2. Click on “Accept” to grant consent.

5. Wait for a few minutes while consent is granted, and Sync 365 retrieves your customer tenant list and licenses.

6. Once complete, you will be returned to the Delegated Admin page. You can proceed once the banner indicating tenant updates disappears.

Microsoft Direct CSP

If you are a Direct CSP with Microsoft, follow these additional steps:

1. Click the settings cog next to the delegated admin you have added.
2. Select a Tenant to test and confirm Direct CSP permissions.

3. If successful, your user will be marked as a Direct CSP, and you will gain access to features such as:

   • Using subscription IDs from your Partner Center.

   • An end-user self-service portal (note: additional charges may apply when added to a customer tenant).