Microsoft 365 Partner Access Setup: Customer Agreement and GDAP Approval

Microsoft has introduced Granular Delegated Admin Privileges (GDAP) to give organizations more control and security when granting partners access to their Microsoft 365 environments. Unlike the older delegated admin model, GDAP ensures partners only get the permissions they truly need — for a limited time — while customers retain full visibility.

Introduction:

As organizations continue to strengthen their security posture, Microsoft has introduced Granular Delegated Admin Privileges (GDAP) to provide a more secure and controlled way for partners to manage customer environments.

GDAP allows Microsoft partners to access only the specific Microsoft 365 resources required to perform their services. Access is granted with limited permissions and for a defined period, improving security while giving customers greater visibility and control over partner access.

To establish the partner relationship, customers must review and approve the GDAP invitation sent by the partner.

Customer action required: 

When a partner sends a GDAP invitation, the customer receives an email containing a secure invitation link.

After selecting the invitation link, the customer is redirected to the Microsoft 365 Admin Center, where they can review the requested permissions and approve the partner relationship.

How to do:

Customers accept the partner agreements and approve the role permission.

Step 1: Review Partner Agreements and Access

After opening the invitation link:

1. Review the partner agreement details.
2. Verify the partner organization information.
3. Review the access permissions being requested.
4. Click Accept and Continue to proceed.

At this stage, Microsoft validates the request and confirms the partner relationship details.

Step 2: Verify the Partner Relationship

Once verification is successful:

1. The customer will be able to view the partner relationship information.
2. Confirm that the displayed partner details are correct.
3. Continue to the role approval process.

This step ensures that the relationship is being established with the intended Microsoft partner organization.

Step 3: Approve Partner Roles

The customer is redirected to the Approve Partner Roles page in the Microsoft 365 Admin Center.

During this stage:

• Review all roles requested by the partner.
• Verify that the permissions align with the services being provided.
• Ensure the requested access follows your organization's security requirements.

Step 4: Review and Accept Access Permissions

Customers must carefully review the access levels being requested.

Key points to verify:

• Administrative roles assigned to the partner.
• Scope of access being granted.
• Duration of the GDAP relationship.
• Compliance with internal security policies.

Once reviewed, select the option to approve the requested permissions.

Step 5: Accept the Partner Relationship

Before finalizing the process:

1. Review the summary of permissions and access levels.
2. Confirm that all information is accurate.
3. Select Accept to establish the partner relationship.

Microsoft will then create the GDAP relationship between the customer tenant and the partner organization.

Step 6: Verify the Partner Relationship

After acceptance:

1. Navigate to the Partner Relationships section within the Microsoft 365 Admin Center.
2. Confirm that the partner relationship is listed and active.
3. Review the assigned roles and relationship details if needed.

Step 7: Global Administrator Verification

Users with the Global Administrator role can view additional details about the GDAP relationship, including:

• Partner organization information
• Assigned administrative roles
• Relationship status
• Access expiration dates
• Security and permission settings

This provides complete visibility and control over delegated administrative access.

Benefits of GDAP

GDAP provides several security and operational advantages:

• Enhanced security through least-privilege access
• Time-bound administrative permissions
• Improved visibility into partner activities
• Better compliance and governance controls
• Reduced risk compared to legacy delegated administration
• Greater customer control over partner access

Conclusion: 

By accepting the GDAP invitation and approving the requested permissions in the Microsoft 365 Admin Center, customers can securely grant partners the access required to support and manage their Microsoft 365 environment.

GDAP ensures that access is limited, controlled, and transparent, allowing organizations to maintain strong security standards while enabling trusted partners to deliver ongoing support and services. Customers retain full visibility and control over all delegated permissions throughout the lifecycle of the partner relationship.