Users and groups
Read and change users and groups in each client’s tenant.
MICROSOFT 365 · MULTI-CLIENT
Microsoft 365 management for MSPs
Manage every client’s Microsoft 365 tenant from Command. Users, groups, conditional access, just-in-time admin, and mailboxes, with secure score, connection health, a standards library, and cloud detection packs for each client.
Command screenshot with sample data. Names are fictional.
- A Microsoft connection for each client
- Users, groups, conditional access, mailboxes
- Just-in-time admin access
- Secure score and cloud alerts per client
ADMINISTRATION
Identity, access, and mailbox administration
Each client’s Microsoft 365 tenant has its own connection to Command. From there, your technicians administer every client from one console.
Conditional access
Review and change each client’s conditional access policies from Command.
Just-in-time admin
Give admin access when it is needed instead of leaving standing admin accounts in every client tenant.
Mailboxes
Manage each client’s mailboxes from the same place as their users and groups.
POSTURE
Secure score, health, and standards for each client
See where each client stands and whether Command can still reach their tenant.
Secure score per client
Secure score for each client, and side by side across all of them on the Clients posture grid.
Connection health and service incidents
See whether each client’s Microsoft connection is healthy, along with Microsoft service incidents.
Standards library
A standards library for your clients’ Microsoft 365 tenants, in the same module as their administration.
CLOUD ALERTS
Cloud detection packs and tenant alerts
Microsoft 365 alerts for each client arrive in Cloud Alerts inside Aegis, next to your endpoint security.
Detection packs per client
Turn on detection packs for each client’s tenant, and their alerts arrive in Cloud Alerts.
Alert-to-incident behavior per client
Choose for each client how cloud alerts become incidents. Each rule has a minimum severity.
Incidents name the rule
An incident created from a cloud alert records which rule fired.
- Client tenantIts own Microsoft connection
- Detection packTurned on for that client
- IncidentRecords which rule fired
ONE CONSOLE
Connects with the rest of Command
Sentry EDR and Web Protection
Endpoint protection and DNS filtering inside Aegis, on the same policy engine.
Response Ops and playbooks
Every incident in one place, and playbooks whose riskier steps pause for a person.
Service Desk (PSA)
Ticketing, todos, a shared calendar, and a knowledge base, with SOC and service work on one board.
Integrations
Microsoft 365, Microsoft Defender, Google Workspace, QuickBooks, and your own AI provider.
Every Command module
Service delivery, endpoints, security, Microsoft 365, and documentation in one console.
INCLUDED IN THE ONE PRICE
$6 per endpoint per month, every module included
One price covers every Command module, including Sentry EDR and Web Protection. Unlimited technicians, month-to-month, and a free 30-day pilot on up to 50 endpoints.
FAQ
Microsoft 365 management: common questions
What can Command change in Microsoft 365?
Users, groups, conditional access policies, just-in-time admin access, and mailboxes can be read and changed from Command.
Is each client connected separately?
Yes. Each client has its own Microsoft connection, and secure score, connection health, and detection packs are all per client.
Does it show secure score?
Yes, for each client, and across all clients on the Clients posture grid.
Is Microsoft 365 management included in the price?
Yes. It is part of the one Command price of $6 per endpoint per month, with every other module, unlimited technicians, and no long-term contract.
See it in a walkthrough, or try it on your own endpoints
Book a demo for a guided tour, or apply for the beta to run Command free for 30 days with guided onboarding.