Microsoft 365: Granting IONOS the necessary administration rights (existing customers)
This article explains how to grant the necessary administration rights to IONOS so that IONOS can manage your Microsoft 365 licences, and support you in the event of problems.
For security reasons, Microsoft has introduced the Granular Delegated Admin Privileges (GDAP) to increase the security for the administration of customer accounts. This is in accordance to the Microsoft Zero Trust Principle. The Zero Trust Principle is an IT security concept that states that the provider from whom you purchase a Microsoft 365 licence is assigned the lowest possible access authorisations, in order to minimise potential risks.
Note
The GDAP are granted by you for a period of 2 years (730 days). You must then reassign the required rights for security reasons. The rights granted cannot be restricted by you.
Please Note
If you do not assign these rights to IONOS, then IONOS cannot manage your Microsoft 365 licences. In this case, you must manage your Microsoft 365 licences yourself without the service and support of IONOS within the Microsoft Admin Center. This also applies if you do not reassign the GDAP to IONOS after the 2-year period has expired.
Experienced knowledge of the Microsoft Admin Center and Microsoft 365 is required for the independent administration of your Microsoft 365 licences. The independent administration of Microsoft 365 licences should only be carried out by experienced users. For this reason, we recommend that you assign IONOS the necessary rights to manage the Microsoft 365 licence.
Preparation
To confirm the GDAP relationship and continue to benefit from the support of IONOS, you need a user with global administrator rights for Microsoft 365. To ensure this, please confirm that you have access to a user with global admin rights in the IONOS account before the GDAP relationship expires. you can find more information on this in the following article: Microsoft 365: User roles
You will be informed directly by Microsoft about the expiry of the GDAP relationship. After logging in as a global administrator, you can then confirm the GDAP relationship for a further 2 years in the IONOS account. It is not possible to extend the relationship before it expires.
Renew GDAP
- Log in to your IONOS account.
- In the main navigation, click Menu > Microsoft 365. If you also use other IONOS Office products, click Menu > Office and then select the Microsoft 365 tile.
- To assign the service rights, click on I have not yet granted the service rights. The login page of the Microsoft 365 Admin Center opens.
- Enter your account email and click on Next.
- Enter the password and click on Log in. The Microsoft 365 admin center opens and the page Information on partner relationships is displayed.
- Click Next. The Accept Microsoft Customer Agreement page opens.
- Click on Accept. The Check requested roles page opens.
- Click on Next. The Accept and complete the relationship page opens.
- Click on Accept. The page You have accepted a partner relationship is displayed.
- Click on Close.
