The Microsoft 365 assistant: users, groups and licences, with approvals

What it does

• Looks up users and groups, and lists the licences a tenant holds.
• Creates and updates users and groups, and changes group membership.
• Assigns and removes licences.
• Shows each change before it runs and waits for a click where the rules say so.

How it connects

One administrator consent per client tenant, given from that client's office in the dashboard.

What it reads and writes

• Reads and changes: users, groups, group membership and licence assignments, through Microsoft Graph.
• The action list holds nothing for mailboxes, files or chat history, so there is no way to ask it to read them.
• Access is per client office. One client's consent never reaches another client's tenant.

Limits you should know about

• Deleting a user, deleting a group and resetting a password always need a person, even on a machine set to run everything.
• It works one office at a time. There is no fleet-wide view across your clients' tenants.
• Each request runs a short, bounded series of steps and then stops.

Setting it up

1. Open the client's office in the dashboard and connect Microsoft 365.
2. That client's Global Administrator approves the consent screen once.
3. Ask for what you want in the chat, for example to create a user and give them a licence.

Related

• Features: where this fits in the wider flow.
• Sign in with Microsoft (live)
• Autotask PSA (live)
• All 5 integrations and what we do not do.