> ## Documentation Index
> Fetch the complete documentation index at: https://university.triggr-app.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Microsoft 365

> Let Triggr Core work in your clients' Microsoft 365 tenants, through GDAP or a per-client app.

On Home, click **Set up** next to Connect Microsoft 365. Setting up each client's Microsoft access needs an organisation Admin; the wizard resumes where you left off.

<Frame caption="Connect Microsoft 365 with GDAP, step by step (1:30).">
  <video controls preload="none" playsInline className="w-full aspect-video rounded-xl" poster="/images/videos/connect-microsoft-365.jpg" src="https://mintcdn.com/triggr/rFRD51HB_88hTzdJ/images/videos/connect-microsoft-365.mp4?fit=max&auto=format&n=rFRD51HB_88hTzdJ&q=85&s=695ec51cff1df8b6a6ca8f4f9289dc68" data-path="images/videos/connect-microsoft-365.mp4" />
</Frame>

## Choose how to connect

Pick **GDAP (Partner Center)** if you're a CSP partner, otherwise Per-client app. The choice applies to all clients.

<Frame>
  <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/choose-how-to-connect.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=83f3c9fcdf488c17f039542da27eb259" alt="The Choose how to connect step with two cards: GDAP (Partner Center), marked Recommended, and Per-client app, with the wizard's steps listed on the left." width="2110" height="820" data-path="images/core/connect-microsoft-365/choose-how-to-connect.png" />
</Frame>

## Connect with GDAP

You need Partner Center access, GDAP relationships with the [recommended roles](/integrations/microsoft-graph/recommended-roles), and an admin who can create users and assign Entra roles.

<Steps>
  <Step title="Find your tenant">
    Enter your own domain and click Find tenant.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/find-tenant.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=65190be13ee48ac638a7ec6095afe7e2" alt="The Find your tenant step with contoso.com in Your Microsoft 365 domain, a Find tenant button and a green Tenant found message showing the tenant ID, above Back and Continue buttons." width="1552" height="644" data-path="images/core/connect-microsoft-365/find-tenant.png" />
    </Frame>
  </Step>

  <Step title="Create a service account">
    Create the account in Microsoft Entra with the details shown, following the [service account guide](/integrations/microsoft-graph/gdap-service-account#create-the-service-account) and [Conditional Access](/integrations/microsoft-graph/conditional-access), then tick all five items.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/service-account.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=a69b66db70f5d8f7f79e476c41b9e79e" alt="The Create a service account step with a Username and Display name to copy, and five ticked items: create the user in Entra, add it to AdminAgents and your GDAP groups, make it a Global Administrator, require MFA, and exclude it from Conditional Access." width="1552" height="922" data-path="images/core/connect-microsoft-365/service-account.png" />
    </Frame>
  </Step>

  <Step title="Sign in">
    Click **Approve**, then Sign in on Connect Microsoft Graph and on Connect Partner Center, each time as the service account with MFA. Wait for Partner Center check to find your customers.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/sign-in.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=9916ade7f3a22c14dfaec0fa2dac4565" alt="The Sign in step with four rows, Approve Triggr's app, Connect Microsoft Graph, Connect Partner Center and Partner Center check, each marked done, with Redo and Check again buttons." width="1545" height="1150" data-path="images/core/connect-microsoft-365/sign-in.png" />
    </Frame>
  </Step>

  <Step title="Add clients">
    Untick any customers you don't want and click Add, then confirm. They're added as cloud-only clients linked to GDAP. Leave Do this automatically for clients I add ticked, and keep the tab open until each client shows Ready.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/add-clients.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=2ff945f1f847686faef92b812f5b2cfe" alt="The Add clients step listing Partner Center customers with their tenant IDs, two marked Already imported and three ticked as Available, an Add 3 button, a collapsed Approve Triggr in each client (optional) section, and the Set up Microsoft access card with Do this automatically for clients I add (recommended) ticked." width="1552" height="1513" data-path="images/core/connect-microsoft-365/add-clients.png" />
    </Frame>
  </Step>

  <Step title="Done">
    Click **Open Entra** and remove Global Administrator from the service account. Then click Check client connections and Run all to test each client's access.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/core/connect-microsoft-365/done.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=4cff1ad28723e83173ce17540bbfe1b4" alt="The Done step showing Microsoft 365 is connected with GDAP (Partner Center), contoso.com and 2 clients, a warning to remove Global Administrator from the service account with an Open Entra link, and Back to home and Check client connections buttons." width="1552" height="700" data-path="images/core/connect-microsoft-365/done.png" />
    </Frame>
  </Step>
</Steps>

## Connect with a per-client app

You need a Global Administrator of your own tenant and of each client's.

<Steps>
  <Step title="Find your tenant">
    Enter your own domain and click Find tenant.
  </Step>

  <Step title="Approve the app">
    Click Approve and sign in as your own Global Administrator.
  </Step>

  <Step title="Approve clients">
    Click Approve on each client and sign in as its Global Administrator, then click **Set up Microsoft access for all clients**. For No tenant ID, click Add tenant ID first. With no clients yet, click Continue and come back after you [add your clients](/core/get-started/add-your-clients).
  </Step>
</Steps>

## Change your connection

Rerun the wizard, or change Default Microsoft connection in **Settings > General**. Workflows switch at once, so connect your clients the new way first.

## Troubleshooting

<AccordionGroup>
  <Accordion title="“Couldn't find a Microsoft tenant for that domain”">
    Click Enter tenant ID manually and paste it from Entra ID > Overview.
  </Accordion>

  <Accordion title="“Your browser blocked the sign-in window”">
    Allow pop-ups for `core.triggr-app.com`, then click Sign in again.
  </Accordion>

  <Accordion title="Microsoft keeps signing me in as myself">
    Choose Use another account in Microsoft's window and sign in as the service account.
  </Accordion>

  <Accordion title="Partner Center check fails">
    Check the service account is in AdminAgents (changes take up to an hour), then click Check again. For MFA errors, see [Conditional Access](/integrations/microsoft-graph/conditional-access#troubleshooting).
  </Accordion>

  <Accordion title="A client shows Needs attention">
    Usually a missing [GDAP role](/integrations/microsoft-graph/recommended-roles). Fix it, then click Retry the ones that need attention.
  </Accordion>

  <Accordion title="“Only organisation admins can set up Microsoft access”">
    Ask an [Admin](/core/get-started/invite-your-team#invite-teammates) to run this step.
  </Accordion>

  <Accordion title="Does the service account need Global Administrator or a licence?">
    Global Administrator is only for approving Triggr's app on Sign in; remove it on Done. It needs no licence or mailbox.
  </Accordion>
</AccordionGroup>

More answers, including what each GDAP health status means: [Microsoft and GDAP FAQ](/core/reference/microsoft-faq).

Next: [Connect your PSA](/core/get-started/connect-your-psa).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.