Microsoft 365 management for MSPs, automated from the ticket
Rallied does the Microsoft 365 admin work from the ticket, in whichever customer tenant it belongs to. New starters, leavers, licence changes, group moves, shared mailboxes, and account lockdowns get done without a technician remoting in. Each action runs on its own or waits for a technician, and you set that per tool and per customer.
$150 a month for 2,000 credits, about 700 tickets in a typical month.
How it works
Your tech’s job changes from remoting into the tenant to approving a plan. Every check Rallied ran and every change it wants to make is written on the ticket first, and anything you have set to wait for approval waits for a reply.
- Set up the new starter.
- Creates the account with a temporary password, assigns a licence from the seats the tenant already has, adds them to the right groups and distribution lists, and grants access to the shared mailboxes their team works from. One ticket, and it is done before their first day.
- Shut down the leaver.
- Blocks sign-in, revokes every active session, resets the password, frees the licence, removes them from groups and lists, converts the mailbox to shared, and forwards their mail to a manager. The same list your techs work through by hand today, in the same order.
- Lock down a compromised account.
- Checks whether Microsoft has flagged the user as risky, reviews the failed sign-ins and any inbox rule forwarding mail outside the tenant, then revokes sessions and resets the password. The forwarding rule is usually the tell.
- Work across every tenant.
- Every customer tenant you manage is in one list. A ticket is matched to its tenant by the requester’s email domain, not by the company name somebody typed into the PSA. Nothing runs in a tenant until you have switched it on, one at a time or all at once through CIPP.
Everything Rallied can do in a customer tenant
Every action below has its own switch: run on its own, or put the plan on the ticket and wait for a technician. You set each one per tool, and per customer where one needs tighter handling.
Accounts
- Create a user
- Disable or enable a user
- Get a user, search users
- Check whether an account exists
- Reset a password
- Generate a temporary password
- Check directory roles
Licences
- List licence SKUs and free seats
- Check a user’s licences
- Assign a licence
- Remove a licence
Groups and lists
- Search groups, list members
- Check a user’s memberships
- Add or remove a group member
- List distribution groups
- Create a distribution group
- Add or remove a distribution list member
Mailboxes
- Create a shared mailbox
- Convert a mailbox to shared
- Grant Full Access or Send As
- Set or remove forwarding
- List inbox rules
- Remove an inbox rule
- Send email from a mailbox
Security
- List users Microsoft flagged as risky
- Check one user’s risk status
- Review failed sign-ins
- Check MFA methods
- Revoke sign-in sessions
Tenants
- List every customer tenant
- Find the tenant for an email domain
- Switch a tenant on, or all of them through CIPP
How to connect, and exactly what access Rallied asks for, is on the Microsoft 365 integration page.
It figures out things we don’t even have in documentation and solves issues without my team touching them. That to me is amazing.
Questions about Microsoft 365 automation
Can you automate user offboarding in Microsoft 365?
Yes. From one ticket, Rallied blocks sign-in, revokes active sessions, resets the password, frees the licence, removes the user from groups and lists, converts the mailbox to shared, and forwards mail to a manager. You can have it wait for a technician's approval before it starts.
Can you automate new user onboarding in Microsoft 365?
Rallied creates the account with a temporary password, assigns a licence from the seats the tenant already has, adds the user to the right groups and distribution lists, and grants access to their team's shared mailboxes. The credentials go to the manager who asked, not to the new mailbox.
How does Rallied reach each customer's tenant?
Through your GDAP relationships. Every tenant you manage appears in one list, and a ticket is matched to its tenant by the requester's email domain. Each tenant stays off until you switch it on, one at a time or all at once through CIPP.
Does Rallied make Microsoft 365 changes without asking?
Password resets, user creation, and group changes wait for a technician until you change that. Every action has its own switch, set per tool, and per customer where one needs tighter handling.
How much does Microsoft 365 automation cost?
Rallied is $150 a month with 2,000 credits included. A new starter or a leaver is one ticket, charged once for the most work the agent did on it: 3 credits when it changes things in Microsoft 365, or 8 when it works across 3+ systems using 6+ different actions. Tickets it couldn't finish are never charged.