Advisory review
Microsoft 365 tenant review: read the setup before you trust Copilot with it.
Years of small decisions pile up inside a Microsoft cloud account: permissions granted in a hurry, a sharing setting changed for one project, an app someone approved from a pop-up. On their own they look harmless. Together they are what Copilot, or anyone who gets a password, walks straight through. We read all of it and rank what to fix.
Sample client, month 2. Illustrative findings.
In one sentence
A ranked read on how your Microsoft account is set up, and the gaps that matter.
- Advisory review
- Delivery
- Monthly watch
One engagement, in this order. You can start at the stage that fits you.
Advisory review
What this work involves
A Microsoft cloud account collects decisions. Admin rights granted in a hurry, a sharing setting changed for one project, an app someone approved from a pop-up. On their own they look harmless. Together they are the exposure that Copilot, or anyone who gets a password, will walk straight through.
The review reads all of it against a standard. Who holds the strongest admin rights, and whether that is too many people. How sign-in is protected, including old mail settings that skip the second check. What is shared outside the company, which guests can still get in, and which outside apps people have approved. That last one is where unapproved AI tools usually appear.
It ends in a ranked fix list rather than a report no one reads. Your IT firm keeps running the account; we hand over what to fix, in what order, and what to watch.
Who does what
You keep your team, and we take this part.
- You — Approve the fix order and who carries it out.
- Third Shift — Read the settings and rank what matters.
- Your IT firm — Make the changes and keep the account running.
- Microsoft — Supplies the platform the settings live in.
Who it is for
A fit when
- Companies holding client, patient, or financial data in Microsoft 365
- Firms planning Copilot and needing the exposure measured first
- IT teams that want an outside read before a renewal or an audit
Scope
What it is not
- Not the help desk. We design the fixes; your team or IT firm makes them
- Not device management. Laptops, updates, and support stay with your IT firm
- Not a penetration test. It reads settings and exposure, not break-in attempts
Where this has run
Profiles using this work.
- Two Microsoft accounts, one renewal, and Copilot waiting.
Regional insurance agency · ~70 staff - The IT director left mid-project, but the project continued.
Regional construction firm · ~180 staff
Who buys this
Industries that start here.
- Construction, trades, and engineering — Job costing that depends on one person's spreadsheet, and an IT director who left mid-project.
- Insurance agencies and brokerages — Two systems of record, shared carrier logins, and a renewal calendar no one watches.
The order
Part of the sequence, not the whole of it.
This is the entry point for most engagements. The first conversation covers the setup and this work is scoped from what it finds.
This listing is part of the Microsoft 365 practice, which starts with a read of your Microsoft account and licenses rather than a purchase.
Questions
Questions about microsoft 365 tenant review
What is a Microsoft 365 tenant review?
A Microsoft 365 tenant review is our review of how your Microsoft cloud account is set up. It shows who holds admin rights, how sign-in is protected, what is shared with whom, which outside apps people have approved, and where the gaps are. It ends in a ranked fix list with an owner for each item.
How does this fit with our MSP?
Your IT firm keeps running your Microsoft cloud account. Third Shift reads the settings, ranks the gaps, and either fixes them alongside your IT firm or hands over a plan it can carry out. We do not take over day-to-day administration, and we do not become the help desk.
Will you take over our sign-ins and email?
No, Third Shift will not take over your sign-ins or your email. We design the fixes and carry out the ones you ask us to; we do not administer the account on a daily basis. No one at Third Shift will be resetting passwords, managing laptops, or answering help desk tickets. That stays with your team or your IT firm.
What do we get at the end of the account review?
At the end of the Microsoft 365 account review you get a written assessment. It covers how the account is set up, what is exposed, what we would fix first, what each fix costs, and who owns it. Like every review Third Shift does, it is yours whether or not you ask us to do the work.
Start here
Start with the review.
The first conversation covers your environment, and this work is scoped from what it finds.