'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Set Up GDAP Access for a Microsoft 365 Support Partner
Question details
The user needs to configure Granular Delegated Admin Privileges (GDAP) to grant a support provider limited administrative access to their Microsoft 365 tenant.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up limited administrative permissions for an external support provider like IONOS.
- Observed behavior
- The user needs to securely approve and manage a GDAP relationship request initiated by their Microsoft partner.
Ensure you have Global Administrator privileges in your Microsoft 365 admin center before attempting to approve any GDAP relationship requests.
Approve a GDAP Request via Microsoft 365 Admin Center
Use this standard method to review and approve a GDAP relationship request initiated by your support provider.
Granular Delegated Admin Privileges (GDAP) ensure that external partners only receive the exact administrative roles they need to assist you, rather than full global admin rights.
Contact your Microsoft support partner or provider (such as IONOS) and ask them to initiate a GDAP relationship request.
Once the request is sent, log in to the Microsoft 365 admin center using your Global Administrator credentials.
Click the link provided in the partner's request email to review the specific admin roles and duration being requested.
Click to approve the relationship request in the portal, ensuring you only grant the minimum permissions required for the provider to support your tenant.
Set Up GDAP Access Using Microsoft 365 Lighthouse
Use this method if your organization and partner manage multi-tenant access through Microsoft 365 Lighthouse.
Looking for a simpler alternative to Microsoft 365?
Managing Microsoft 365 tenant permissions and enterprise administration can be highly complex. If you are looking for a powerful, easy-to-use office suite without the overhead of enterprise IT management, WPS Office is an excellent choice. It offers robust document, spreadsheet, and presentation tools in a single lightweight application.
Frequently Asked Questions
What is a GDAP relationship in Microsoft 365?
Granular Delegated Admin Privileges (GDAP) is a security feature that allows organizations to provide external partners or support providers with limited, time-bound access to their Microsoft 365 tenant, ensuring they only have the permissions necessary to perform their specific tasks.
Who can initiate a GDAP request?
The GDAP relationship request must be initiated by the Microsoft partner or support provider (such as IONOS or a managed service provider). The customer then reviews and approves the request from within their Microsoft 365 admin center.
How long does a GDAP relationship last?
GDAP relationships are strictly time-bound. The exact duration is specified during the request process and cannot exceed two years. Once the relationship expires, the partner loses access and a new request must be submitted if continued support is needed.
