> ## Documentation Index
> Fetch the complete documentation index at: https://kb.mspprocess.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Microsoft 365

> Let Triggr Core work in your clients' Microsoft 365 tenants, through GDAP or a per-client app.

On Home, click **Set up** next to Connect Microsoft 365. Setting up each client's Microsoft access needs an organisation Admin; the wizard resumes where you left off.

<video controls preload="none" playsInline poster="/images/videos/connect-microsoft-365.jpg" src="https://mintcdn.com/triggr/rFRD51HB_88hTzdJ/images/videos/connect-microsoft-365.mp4?fit=max&auto=format&n=rFRD51HB_88hTzdJ&q=85&s=695ec51cff1df8b6a6ca8f4f9289dc68" />

Connect Microsoft 365 with GDAP, step by step (1:30).

## Choose how to connect

Pick **GDAP (Partner Center)** if you're a CSP partner, otherwise Per-client app. The choice applies to all clients.

![The Choose how to connect step with two cards: GDAP (Partner Center), marked Recommended, and Per-client app, with the wizard's steps listed on the left.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/choose-how-to-connect.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=83f3c9fcdf488c17f039542da27eb259)

## Connect with GDAP

You need Partner Center access, GDAP relationships with the [recommended roles](https://kb.mspprocess.com/integrations/microsoft-graph/recommended-roles.md), and an admin who can create users and assign Entra roles.

**1. Find your tenant**

Enter your own domain and click Find tenant.

![The Find your tenant step with contoso.com in Your Microsoft 365 domain, a Find tenant button and a green Tenant found message showing the tenant ID, above Back and Continue buttons.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/find-tenant.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=65190be13ee48ac638a7ec6095afe7e2)

**2. Create a service account**

Create the account in Microsoft Entra with the details shown, following the [service account guide](https://kb.mspprocess.com/integrations/microsoft-graph/gdap-service-account.md#create-the-service-account) and [Conditional Access](https://kb.mspprocess.com/integrations/microsoft-graph/conditional-access.md), then tick all five items.

![The Create a service account step with a Username and Display name to copy, and five ticked items: create the user in Entra, add it to AdminAgents and your GDAP groups, make it a Global Administrator, require MFA, and exclude it from Conditional Access.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/service-account.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=a69b66db70f5d8f7f79e476c41b9e79e)

**3. Sign in**

Click **Approve**, then Sign in on Connect Microsoft Graph and on Connect Partner Center, each time as the service account with MFA. Wait for Partner Center check to find your customers.

![The Sign in step with four rows, Approve Triggr's app, Connect Microsoft Graph, Connect Partner Center and Partner Center check, each marked done, with Redo and Check again buttons.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/sign-in.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=9916ade7f3a22c14dfaec0fa2dac4565)

**4. Add clients**

Untick any customers you don't want and click Add, then confirm. They're added as cloud-only clients linked to GDAP. Leave Do this automatically for clients I add ticked, and keep the tab open until each client shows Ready. If you leave, Triggr carries on connecting them by itself.

![The Add clients step listing Partner Center customers with their tenant IDs, two marked Already imported and three ticked as Available, an Add 3 button, a collapsed Approve Triggr in each client (optional) section, and the Set up Microsoft access card with Do this automatically for clients I add (recommended) ticked.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/add-clients.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=2ff945f1f847686faef92b812f5b2cfe)

**5. Done**

Click **Open Entra** and remove Global Administrator from the service account. Then click Check client connections and Run all to test each client's access.

![The Done step showing Microsoft 365 is connected with GDAP (Partner Center), contoso.com and 2 clients, a warning to remove Global Administrator from the service account with an Open Entra link, and Back to home and Check client connections buttons.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/done.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=4cff1ad28723e83173ce17540bbfe1b4)

## Connect with a per-client app

You need a Global Administrator of your own tenant and of each client's.

**1. Find your tenant**

Enter your own domain and click Find tenant.

**2. Approve the app**

Click Approve and sign in as your own Global Administrator.

**3. Approve clients**

Click Approve on each client and sign in as its Global Administrator, then click **Set up Microsoft access for all clients**. For No tenant ID, click Add tenant ID first. With no clients yet, click Continue and come back after you [add your clients](https://kb.mspprocess.com/core/get-started/add-your-clients.md).

## Change your connection

Rerun the wizard, or change Default Microsoft connection in **Settings > General**. Workflows switch at once, so connect your clients the new way first.

## Troubleshooting

> [accordion] “Couldn't find a Microsoft tenant for that domain”
>
> Click Enter tenant ID manually and paste it from Entra ID > Overview.

> [accordion] “Your browser blocked the sign-in window”
>
> Allow pop-ups for `core.triggr-app.com`, then click Sign in again.

> [accordion] Microsoft keeps signing me in as myself
>
> Choose Use another account in Microsoft's window and sign in as the service account.

> [accordion] Partner Center check fails
>
> Check the service account is in AdminAgents (changes take up to an hour), then click Check again. For MFA errors, see [Conditional Access](https://kb.mspprocess.com/integrations/microsoft-graph/conditional-access.md#troubleshooting).

> [accordion] A client shows Needs attention
>
> Usually a missing [GDAP role](https://kb.mspprocess.com/integrations/microsoft-graph/recommended-roles.md). Fix it, then click Retry the ones that need attention. Each problem and its fix: [Fix Microsoft connection problems](https://kb.mspprocess.com/core/reference/fix-microsoft-connection-problems.md).

> [accordion] “Only organisation admins can set up Microsoft access”
>
> Ask an [Admin](https://kb.mspprocess.com/core/get-started/invite-your-team.md#invite-teammates) to run this step.

> [accordion] Does the service account need Global Administrator or a licence?
>
> Global Administrator is only for approving Triggr's app on Sign in; remove it on Done. It needs no licence or mailbox.

More answers, including what each GDAP health status means: [Microsoft and GDAP FAQ](https://kb.mspprocess.com/core/reference/microsoft-faq.md).

Next: [Connect your PSA](https://kb.mspprocess.com/core/get-started/connect-your-psa.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.