Step 1: Creating a dedicated service account

A dedicated service account is required to provide authorization to Lifecycle Manager. Creating a new account will ensure it’s set up correctly.
Follow these steps to create a fresh account in your Azure environment:

1. Go to the Microsoft Azure portal: https://portal.azure.com/
    
2. From the Azure home screen, select Microsoft Entra ID. (Or use the search bar to find the Entra ID service)
   
    
3. In the left navigation panel, expand the Manage section and select Users.
   
    
4. At the top of the Users page, click + New user and select Create new user.
    
5. Enter the user details:
   1. User principal name (for example, LifecycleManagerServiceAccount)
   2. Display name
   3. Leave Auto-generate password enabled.
   4. Ensure Account enabled is selected.

This creates the service account that Lifecycle Manager will use later in the integration.

6. After creating the user, sign in once using this account to complete Microsoft’s first-time setup and Multi Factor Authentication (MFA) enrollment.
   
   This step is required for the Microsoft 365 integration to authenticate successfully.

Step 2: Assigning the required Microsoft roles to the service account

Assigning the correct Microsoft roles to the service account ensures it has the necessary access to authorize and retrieve data during the initial setup of the integration.

1. From the Azure portal go to Microsoft Entra ID by clicking its icon under Azure services, or by using the search bar to find it.
    
2. In the left navigation menu expand the Manage section and click Users, then click the name of the user created in step 1 to open the user overview.
    
3. In the left navigation menu, click Assigned Roles.
    
4. At the top of the Assigned roles page, click + Add assignments.
    
5. In the search box at the top of the assignments modal, search for Global administrator and check the box beside it.
    
6. At the bottom of the modal, click Add.
    
7. Confirm that Global Administrator shows in the list of assigned roles for the user.

Step 3: Add the service account to the AdminAgents group

The AdminAgents group is required for Partner Center API access. This is required to interact with the Partner Center API.

1. In the Azure portal, go to Microsoft Entra ID by clicking its icon under Azure services or by using the search bar to find it.
    
2. From the left navigation menu, select Groups.
    
3. In the search box, type AdminAgents, and click the result.
    
4. In the left navigation for the group, click Members (You may need to expand the Manage section).
    
5. Click + Add Members.
    
6. Search for the service account created in Step 1 and check the box next to it.
    
7. At the bottom of the panel, click Select.
    
8. Confirm the service account appears in the list of group members.
    

Step 4: Create a GDAP Lifecycle Manager group

1. In the Azure portal, go to Microsoft Entra ID by clicking its icon under Azure services or by using the search bar to find it.
    
2. In the left navigation panel, expand the Manage section and Select Groups.
    
3. At the top of the page, click + New group.
    
4. Fill in the group details:
   1. Group type: Security
   2. Group name: A descriptive group name (eg. GDAP Lifecycle Manager)
   3. Membership type: Assigned
   4. Leave the other fields at their default values.
       
5. Click Create at the bottom of the page.
    
6. After the group is created, open the group from the main groups page and select Members from the left navigation panel.
    
7. Click + Add members at the top of the page.
    
8. Find the service account created in Step 1, and select the check box next to it.
    
9. Click Select at the bottom of the page.
    
10. Confirm that the service account appears in the group’s member list.

Step 5: Update GDAP relationships in Partner Center

Your GDAP Lifecycle Manager security group must be associated with each customer tenant you manage. These delegated admin relationships are controlled in Microsoft Partner Center.

1. Go to the Microsoft Partner Center at https://partner.microsoft.com/
    
2. Under Workspaces, select Customers.
   
    
3. Select a customer from the list to open their details.
   
    
4. Select Admin relationships and open the active GDAP relationship.
    
5. Identify the security group assigned to the GDAP relationship that includes one of the following roles:
   • Application Administrator, or
   • Cloud Application Administrator
      
6. In a new browser tab, open the Azure portal, and go to Microsoft Entra ID > Groups, locate that customer specific GDAP group, and open it.
    
7. Select Members, then + Add members.
    
8. Search for and select the GDAP Lifecycle Manager group created in Step 4, then click Select.
    
9. Repeat these steps for each customer tenant.

If no GDAP relationship exists for a customer

1. In Partner Center, request a new GDAP relationship with either:
   • Application Administrator, or
   • Cloud Application Administrator
      
2. After the customer accepts the relationship request, follow steps 6-9 above to add the GDAP Lifecycle Manager group to the newly created GDAP security group.
    

Step 6: Connect Microsoft 365 Multi-Tenant in ScalePad

After completing the Azure and Partner Center configuration, you can connect the integration in ScalePad.

1. From the ScalePad Hub, click Integrations in the top navigation bar.
    
2. Click the blue Add integration button.
    
3. Under the SaaS category, click the Microsoft M365 Multi-Tenant tile:
   
    
4. Click Connect & Continue
   • A Microsoft Login window will appear.
      
5. Sign in using the dedicated service account you created in Step 1.
    
6. Complete MFA if prompted.
    

After authorization is successful, the integration appears in your list of connected integrations.