For managed service providers

Turn Microsoft 365 assessments into a repeatable service across every customer

One login for your whole book of business. Connect each customer with their own consent (read-only modules by default), run the same assessment everywhere, and walk into every review with findings that are ready to become projects.

One portfolio

Every customer tenant in one place

Stop juggling GDAP relationships, browser profiles and spreadsheets just to see where each customer stands.

  • Add a customer by domain. We resolve the tenant; you pick modules and send the onboarding link.
  • See consent status at a glance. Granted, awaiting approval, or needs attention.
  • Run on demand or on a schedule. Kick off an assessment for any connected customer in one click, or set each customer to re-assess weekly, monthly or quarterly.
  • Every report on file. Each customer's run history is kept together, separate from everyone else's.

Illustrative example with fictitious customers.

Built for multi-tenant work

Everything an MSP needs to run assessments at scale

Per-customer consent

Each customer's Global Admin approves each module for their own tenant, on Microsoft's consent screen, and the wizard assigns the view-only Global Reader role from their own browser. No shared credentials, no standing admin access, and the customer can revoke it whenever they like.

Predictable run quotas

Each plan includes a set number of tenants and a monthly assessment allowance: 20, 100 or 200 runs. You always know what an assessment costs, and additional runs are available when you need them.

Team roles

Invite your team with the right level of access: owners, admins, members and read-only viewers. Give account managers access to reports without letting them manage the workspace.

Repeatable by design

The same checks, the same format, every tenant, every time. Assessments stop depending on which engineer had a free afternoon.

Findings that become projects

Severity-ranked findings with plain-English explanations make it easy to scope remediation work and put a quote in front of the customer.

Live

White-label reports

Your logo, colors, contact line and footer on the report, the Word summary and the PowerPoint briefing your customer reads. Included in MSP 50, MSP 100 and Enterprise.

Where it fits

Built for the moments that already happen in your customer lifecycle

Pre-sales

With the prospect's consent, show them their real posture in the first meeting. It beats a generic capabilities deck.

Onboarding

Capture a baseline on day one so you know what you inherited, and so the customer can see what you've improved since.

QBRs

Run a fresh assessment before every business review. Bring current findings and progress, not just ticket counts.

Project scoping

Before a Copilot rollout, an Intune migration or a Conditional Access project, confirm what's actually configured today.

From findings to revenue

Every finding is the start of a conversation

The report doesn't just list what's wrong. It explains why each gap matters in terms a business owner understands, which makes the next step easy to agree on.

Group related findings into a project, estimate the effort, and present it alongside the report. Customers approve work they understand.

Good practice: assessments show configuration, not intent. Some findings will be deliberate choices. Review them with the customer before quoting the fix.

HighNo Conditional Access policiesIdentity · Entra ID
ProjectConditional Access rolloutBaseline policies, report-only first
High27 users without MFAIdentity · Entra ID
ProjectMFA registration campaignCommunications, enforcement, follow-up
MediumNo Windows Update ringsDevices · Intune
ProjectManaged patching with IntunePilot, broad and critical rings
Low18% of licenses unassignedLicensing
Quick winLicense right-sizingReduce spend at next renewal

Illustrative examples.

Team roles

Give everyone the access they need, and no more

Your workspace has four roles, so technicians, account managers and leadership each get the right view.

Owner

Runs the workspace

Full control of the workspace, its plan and who's on the team.

Admin

Manages the practice

Manages customers, consent, assessments and team members.

Member

Does the work

Adds customers, runs assessments and works with reports.

Viewer

Reads the results

Read-only access to reports. Ideal for account managers and leadership.

Plans for MSPs

Sized to your customer count, with room to run each tenant twice a month

Each MSP plan includes twice as many monthly assessments as tenants. That's enough to baseline every customer and re-check after remediation.

10tenants on MSP 10
20 runs / month
50tenants on MSP 50
100 runs / month
100tenants on MSP 100
200 runs / month
CustomEnterprise
for larger portfolios
MSP questions

What MSPs ask us

Does this replace GDAP or my PSA/RMM?

No. It sits alongside them. M365Assessments doesn't need GDAP or delegated admin: each customer grants consent to our read-only module apps directly. It's an assessment and reporting tool, not a management or ticketing platform.

What does my customer see when they approve consent?

Microsoft's standard admin consent screen, listing each M365 Assessment module and the permissions it requests (read-only unless you selected an opt-in module). They approve each module once. You can share our security page ahead of time so they know exactly what they're approving.

Can I assess a prospect before they sign?

Yes, as long as the prospect's Global Admin grants consent. Many MSPs use a first assessment as the opening of the sales conversation. If they don't become a customer, they can revoke access at any time.

Can reports carry my own branding?

Yes. On MSP 50, MSP 100 and Enterprise, an admin sets your logo, colors, contact details and footer once under Settings › Branding in the portal, and every new assessment's HTML report, Word executive summary and PowerPoint briefing uses them. You can also hide the "Powered by M365Assessments" line. On other plans, reports still show your organization name as "Prepared by".

Assess your first customer this week

Sign in with your Microsoft work account, add a customer domain and send the onboarding link. Your first report can be ready the same day.