Governance

We are excited to announce an important update to our SaaS solution, Governance Toolkit 365 (GT365). To enhance security and streamline data access, we have replaced the Power BI data refresh authentication method with the Power BI built-in Admin API permissions. This change will take effect on February 21st. To ensure uninterrupted access to your Power BI data, it is crucial that you update your Microsoft 365 tenant configuration as described here. ...

Delegate365 is a powerful web-based solution for managing Microsoft 365 tenants, offering a range of features designed to streamline user, group, license management, and more resource management. Both Delegate365 versions are identical in their core features, but v10 includes some improvements and will be continued. Upgrade soon! Key Features of Delegate365 Both versions of Delegate365 offer a robust set of features, including: User and License Management: Manage users, licenses, and groups within defined organizational units (OUs). Device Management: Assign and manage Devices based on their Tags Group Management: Manage all types of groups, including security, distribution, Microsoft 365, and dynamic groups. Delegation and Automation: Delegate administrative tasks and automate processes to improve efficiency. Auditing and Reporting: Comprehensive logging and reporting capabilities to ensure compliance and provide insights. Mailbox Management: Set mailbox delegations, convert to shared or resource mailboxes, and run message traces. SharePoint and Teams Management: Provision and manage SharePoint sites, Teams tabs, and channels. PowerShell Module: Available for entitled admins to perform operations via PowerShell, with all actions logged. ## Improvements in Delegate365 v10 Version 10 of Delegate365 introduces several enhancements that build on the existing features of v9: ...

The latest update to Delegate365 v10 includes numerous small but impactful changes designed to improve the user experience and functionality. With the addition of new fields and features, administrators can now manage their tasks more efficiently. These improvements reflect our commitment to continuous innovation and user satisfaction. See the changes here. New sync with Administrative Units (AU´s): The new AU synchronization enables the automatic assignment of users to a Delegate365 OU based on the membership of an AU. This works in the same way as synchronizing with security groups. Members of the AU are synchronized to the Delegate365 OU of the same name. If an assigned user is no longer a member of an AU, he or she will be removed from the OU. In module Administration / Sync rules / section User, the user sync can now be selected between Sync with Security Group, Sync with Administrative Units, or User Properties. ...

In our data-driven era, gaining insights into user interactions with tools like Microsoft 365 Copilot is essential for enhancing productivity. For administrators, it is vital to know which users are utilizing a Copilot license and the specific services they are engaging with. This information helps in managing licenses effectively, ensuring that resources are allocated efficiently. The Microsoft 365 Security Audit Logs offer a detailed view of user activities, including interactions with Copilot, even when the organization’s anonymization settings are enabled. Here’s how this works. ## Get Copilot Usage with Graph Reports ...

Delegate365 faced significant challenges in managing license data reports due to its daily storage practices. The root cause was the accumulation of an excessive amount of license data over the years, which exceeded the available resources. So we changed that and the License Aggregation Report in Delegate365 got an update. What Happened Recently, several users encountered a “Query Timeout - operations failed” error when generating a report in menu Licenses / License Aggregation. The system recorded license data for all Organizational Units (OUs) every day, resulting in the accumulation of hundreds to thousands of rows daily. Over time, this practice led to the creation of millions of rows in the database. Consequently, the Delegate365 client struggled to process this vast amount of data efficiently. ...

Accessing the Power BI REST API with an application is crucial for efficiently managing and monitoring your Power BI environment. This guide will walk you through using the Power BI REST API with an app as an admin. By leveraging a service principal, your app can seamlessly authenticate and interact with Power BI resources. This allows our app to read Power BI workspaces and usage data automated to streamlines administrative tasks in Power BI. A Service Principal Name (SPN) is an authentication method that enables a Microsoft Entra application to access Microsoft Fabric content and APIs. When you create a Microsoft Entra app, a service principal object is automatically generated. This object, commonly referred to as the Service Principal, allows Microsoft Entra ID to authenticate your app. Once authenticated, the app can access resources within the Microsoft Entra tenant. See more at Service principals can access read-only admin APIs. and Tenant settings index. ...

We are thrilled to announce the launch of the latest version of our Software-as-a-Service solution, Delegate365 (delegate365.com). This brand-new iteration is designed to provide a faster, more modern, and highly efficient delegated management experience. Available now for testing, Delegate365 is here to transform how you manage and delegate your Microsoft 365 environment. For the past decade, we have consistently updated Delegate365 to ensure it remains at the forefront of IT management solutions. Our commitment to security has been unwavering, with regular updates to protect against emerging threats and vulnerabilities and to enhance the platform’s security and functionality. We have continually introduced new features to meet the evolving needs of our users. From integrating advanced functionalities to improving user experience, our updates have always aimed to make Delegate365 more powerful and user-friendly. This dedication to innovation and security has made Delegate365 a trusted solution for IT management over the years. ...

In today’s rapidly evolving digital landscape, maintaining visibility and control over your organization’s M365 Power Platform environment is crucial. The Center of Excellence (CoE) for the Microsoft 365 Power Platform serves as a vital tool for organizations to monitor, manage, and optimize your Power Platform resources effectively. In this article, we will guide you through the process of setting up the current version of the CoE Core solution using Azure Key Vault for secure and efficient Audit Log access. ...

In today’s digital landscape, managing privileged access to applications is crucial for maintaining security and compliance. Microsoft Entra Privileged Identity Management (PIM) offers a robust solution to manage, control, and monitor access within your organization. In this guide, we’ll walk you through the process of configuring Microsoft Entra PIM for your application, Delegate365, ensuring that only authorized users can access it through a security group. Delegate365 is equipped with robust security features and offers seamless integration with Microsoft Entra Privileged Identity Management right out of the box. This integration ensures that administrators can only access Delegate365 using their standard work accounts when the PIM role is activated. Without activating the PIM role, access to Delegate365 is denied. ...

Our Governance Toolkit 365 (GT365) provides information and automation solutions for a Microsoft 365 tenant. In order to use the functions, this app must be approved by an administrator. In addition, new solutions are constantly being added. Some of these also require new permissions. You can find out how you as an administrator can grant and renew these permissions here. GT365 requires an app “Governance Toolkit 365” that reads the data from the M365 tenant and collects it for further actions. An administrator must approve this app so that the functions can be used. There are the following functions that administrators can perform: ...