Microsoft 365 management
What Microsoft 365 management should include every month
If the only Microsoft 365 work you see is a password reset, the tenant is drifting. Management is a calendar, not a help desk that happens to have admin rights.
Creating users is necessary. It is not the job. The job is whether last month’s hires have MFA, last month’s exits are gone, and last month’s new Team is not a guest free-for-all.
This list is for owners, office managers, and controllers who were told Microsoft 365 was “included” and cannot say what that means.
Why this matters
Tenants change every week. Without a rhythm, security mistakes from the first article in this series return: optional MFA, extra admins, dead accounts, mystery sharing.
A monthly look is cheaper than an incident and more honest than “we monitor 24/7” with nothing you can read.
Why the month is empty
Admin is treated as break-fix
Someone has the keys. They only use them when a ticket arrives. The tenant does not get inspected.
Reports exist and nobody reads them
Microsoft will produce logs. A business owner needs a short summary: what was reviewed, what failed, what needs a decision.
Security is saved for the insurance form
Then there is no time. Monthly is how MFA and admin lists stay true.
Business impact of skipping it
- Licenses and people diverge.
- Guests and links accumulate.
- A former employee still signs in.
- You discover an unused paid feature the week a questionnaire is due.
What the month should include
Identity and MFA
New users enrolled. Exceptions listed. Admins still the right people, on separate accounts.
Joiners and leavers
Hires get the right license and groups. Exits lose mail, files, Teams, and devices on a checklist — not a hope.
Licenses
Assigned licenses match the roster. Paid security features that are on the bill are either configured or flagged as waste.
Sharing and guests
External sharing, anonymous links, and guest accounts reviewed against what the business still needs.
Devices
Known devices, unknowns called out, lost hardware that can still be locked.
A summary leadership can read
What changed, what is open, what needs a yes or no. Not a 40-page export.
Recommended solution
Ask whoever has admin today to show the last 90 days of this list. If they cannot, you have a queue with a Microsoft portal, not management.
323 Technologies treats this list as Microsoft 365 management. If you also need the rest of IT owned — help desk, network, vendors — that sits with managed IT, same team in Southlake.
How 323 Technologies helps
We take the tenant you have, put the monthly cycle on it, and stay the named administrator. Mail and files stay put unless we agree they should move.
You should be able to ask “what happened in Microsoft 365 last month?” and get an answer that is not a password-reset count.
Questions
Is this extra on top of Microsoft 365?
Microsoft’s fee is the platform. This is administration. If it is not in someone’s monthly work, it is not happening.
Do we need this if we have a full managed IT agreement?
It should be inside that agreement, explicitly. If Microsoft 365 is “included” with no monthly review, it is not included in any useful sense.
Will staff see this work?
They should not notice it most months. They notice when it was skipped: a leftover account, a license surprise, a guest who still has the files.
How does this relate to a security assessment?
An assessment is a snapshot. The month is how the snapshot does not rot. Use an assessment when you have never looked; use the month so you do not need a panic look every year.
Can our office manager do this?
Parts of offboarding, yes. Admin roles, Conditional Access, and device policy are easy to get wrong. Someone who lives in the tenant should own those.
Where do we start if nothing on the list is happening?
MFA and the admin list first, then former employees, then licenses and sharing. That order reduces the blast radius fastest.
Next step
If last month in Microsoft 365 is a blank, that is the problem.
See Microsoft 365 management from 323 Technologies — a named owner and a monthly rhythm for tenants in Southlake and Dallas–Fort Worth.
Or call (817) 477-6111