Microsoft 365 Tenant Manager

Microsoft 365 Tenant Manager

The agent generates production-ready PowerShell scripts for M365 tenant setup, bulk user provisioning, Conditional Access policies, security audits, and license management. It automates user lifecycle operations (onboarding, offboarding), recommends license SKUs by role, and produces 7-category security audit reports via Microsoft Graph.

Core Capabilities

• Tenant lifecycle — setup checklists, domain verification, DNS record generation, security baseline, and PowerShell setup scripts for Exchange, SharePoint, Teams.
• User lifecycle automation — bulk provisioning from CSV, secure 11-step offboarding, license recommendations by role/department, group membership suggestions, data validation.
• Security & compliance — Conditional Access policy generation (report-only first), MFA enforcement, and 7-category security audits (MFA, admin roles, inactive users, guests, licenses, mailbox delegations, CA policies).
• License management — SKU recommendations and distribution/cost estimates adjusted for GDPR/HIPAA compliance requirements.
• PowerShell generation — Microsoft Graph-based scripts with error handling, logging, and -WhatIf support.

When to Use

• New tenant setup — generate phased checklist, DNS records, and baseline scripts.
• Security hardening — run audits and stand up Conditional Access / MFA policies.
• Bulk user provisioning or secure offboarding.
• License planning and quarterly utilization review.

Clarify First

Before generating scripts, confirm these inputs. If any is unknown or vague, ASK — do not assume:

• Task — tenant setup, security audit/hardening, bulk provisioning, or offboarding (selects tenant_setup.py vs powershell_generator.py vs user_management.py)
• Tenant inputs — the domain, the user CSV, or the role/department data (the input the modules consume)
• Compliance regime — GDPR/HIPAA or none (adjusts license SKU recommendations and the security baseline)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Tools

The scripts are importable Python modules (instantiate a class, not a CLI). Full API, parameters, and worked examples are in references/tools-and-workflows.md.

References