{
	"id": "208dccca-5c7a-4bc4-b435-fd5a4c804095",
	"created_at": "2026-04-06T03:35:47.584908Z",
	"updated_at": "2026-04-10T03:21:26.790824Z",
	"deleted_at": null,
	"sha1_hash": "d23bd2cf96f3e7427b5ab5d0033e8d00aec477d0",
	"title": "Manage Microsoft-certified solution provider partner relationships",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44800,
	"plain_text": "Manage Microsoft-certified solution provider partner relationships\r\nBy cmcatee-MSFT\r\nArchived: 2026-04-06 03:11:48 UTC\r\nYou can work with Microsoft-certified solution providers (partners) to buy and manage products and services for\r\nyour organization or school. There are a few steps involved in getting things set up.\r\n1. Admins find and contact a partner at https://marketplace.microsoft.com/marketplace/partner-dir.\r\n2. Partners send an email request to customers to establish a partner relationship.\r\n3. Customers accept the invitation in Microsoft 365 admin center and start working with the partner.\r\nYou must be at least a Billing Administrator to do these steps. For more information, see About admin roles.\r\nThere are several ways that a partner can work with you. Based on your stated business needs, they choose one of\r\nthese types when they send their request to work with you.\r\nPartner type Description Roles\r\nAdvisor\r\nPartners can reset passwords and handle support incidents for\r\nyou.\r\nGlobal admin,\r\nHelpdesk admin.\r\nIndependent\r\nSoftware Vendors\r\nPartners who develop and sell custom software products that run\r\non one or more computer hardware or operating system\r\nplatforms. Some ISVs focus on developing software or custom\r\napplications that focus on a particular operating system, and\r\nother ISVs specialize in a particular application area.\r\nNo roles\r\nassigned.\r\nIndirect reseller\r\nPartners who manage products and services for your organization\r\nor school.\r\nNo roles\r\nassigned.\r\nLine-of-business\r\n(LOB) partner\r\nPartners can develop, submit, and manage LOB apps specific for\r\nyour organization or school.\r\nNot available to\r\nassign.\r\nMicrosoft Products\r\n\u0026 Services\r\nAgreement\r\n(MPSA) partner\r\nIf you've worked with multiple partners through the MPSA\r\nprogram, you can allow them to see purchases made by each\r\nother.\r\nNo roles\r\nassigned.\r\nOriginal\r\nEquipment\r\nManufacturer\r\n(OEM)\r\nWindows Autopilot is managed and maintained by Microsoft.\r\nThis service provides the backend database that associates\r\nhardware hashes with customer tenants. When an OEM registers\r\ndevices for a customer, they write that data to this database and\r\nnot directly to the customer's tenant. No permissions to the\r\nNo roles\r\nassigned.\r\nhttps://docs.microsoft.com/en-us/microsoft-365/commerce/manage-partners?view=o365-worldwide\r\nPage 1 of 3\n\nPartner type Description Roles\r\ncustomer's tenant are granted or required for OEMs to register\r\ndevices on the customer's behalf.\r\nPartner\r\nYou give your partner a user account in your tenant, and they\r\nwork with other Microsoft services on your behalf.\r\nAny Microsoft\r\nEntra role.\r\nFor more\r\ninformation, see\r\nMicrosoft Entra\r\nbuilt-in roles.\r\nPartner with\r\nGDAP access\r\nPartners who manage products and services for your organization\r\nor school, but who have limited access to what they can do in the\r\nMicrosoft 365 admin center. Granular delegated administrator\r\nprivileges (GDAP) let partners complete tasks in the admin\r\ncenter without having global admin permission. By giving\r\nGDAP to partners, you ensure they have the least-permissive\r\nroles and limit the risk to your organization.\r\nAny Microsoft\r\nEntra role.\r\nFor more\r\ninformation, see\r\nMicrosoft Entra\r\nbuilt-in roles.\r\nReseller\r\nPartners who sell Microsoft products to your organization or\r\nschool.\r\nNo roles\r\nassigned.\r\n1. Go to https://marketplace.microsoft.com/marketplace/partner-dir.\r\n2. Use the filters to narrow your search. When you find a partner that you want to work with, select Contact\r\nme.\r\n3. Enter your location and contact information. Select your organization size, include your organization name,\r\nselect your industry focus, and then describe your business needs.\r\n4. When you're finished, select Contact me.\r\nThe partner contacts you and gives you a chance to learn more about them. If you decide to work with them, they\r\nsend you an email invitation to establish a partner relationship.\r\nAfter you find a partner and decide to work with them, they send you an email invitation.\r\n1. In the email, select the link to go to the Microsoft 365 admin center.\r\n2. On the Accept agreement \u0026 authorize partner page, select the link for the Microsoft Customer\r\nAgreement, and read the document.\r\n3. Check the box to acknowledge that you read the agreement.\r\n4. Select Accept \u0026 Authorize.\r\n5. The list of partners that you're working with is displayed. Select any partner to see details.\r\nIf you already have a partner but haven't yet signed a Microsoft Customer Agreement, you must accept the\r\nagreement before they can make purchases or manage your subscriptions on your behalf.\r\nhttps://docs.microsoft.com/en-us/microsoft-365/commerce/manage-partners?view=o365-worldwide\r\nPage 2 of 3\n\n1. If you receive an email from your partner, select the link to go to the Microsoft 365 admin center, or go to\r\nthe Accept agreement page.\r\n2. Select the link for the Microsoft Customer Agreement and read the document.\r\n3. Check the box to acknowledge that you read the agreement.\r\n4. Select Accept.\r\n5. The list of partners that you're working with is displayed. Select any partner to see details.\r\nThe GDAP feature gives partners more granular and time-bound access to their customers' workloads. This means\r\nthat partners are better able to address their customers' security concerns. Partners can also provide more services\r\nto customers who are uncomfortable with the current levels of partner access and who have regulatory\r\nrequirements to provide only least-privileged access to partners. With GDAP, you agree to give partners roles\r\nspecified in their request. These roles are customizable, so you can discuss with your partner if you don't approve\r\ncertain permissions.\r\nIf you don't want to give admin roles to the partner, cancel the invitation instead of accepting it.\r\nYou can remove admin roles from a partner at any time. Removing the admin roles doesn't remove the partner\r\nrelationship. They can still work with you in a different capacity, such as a Reseller. If you decide that you don't\r\nwant to work with a partner anymore, contact your partner to end the relationship.\r\n1. In the admin center, go to the Settings \u003e Partner relationships page.\r\n2. On the Partner relationships page, select the row that contains the name of the partner that you want to\r\nremove.\r\n3. On the partner page, select Remove roles.\r\n4. In the Remove roles? dialog box, select Yes.\r\nIf you don't see the Remove roles option, contact the Partner Center.\r\nIf you're a partner who's an Admin On Behalf Of (AOBO) a customer, the Marketplace page, Billing \u003e Your\r\nproducts page, and Billing \u003e Bills \u0026 payments page are no longer available in the Microsoft 365 admin center.\r\nTo buy and manage subscriptions for your customer, visit the Partner Center. You can still view the Licenses and\r\nBilling notifications pages in the Billing menu. To manage domain subscriptions for your customers, ask them to\r\nsign in with an account that has both the Domain Name Administrator and Billing Administrator role.\r\nSource: https://docs.microsoft.com/en-us/microsoft-365/commerce/manage-partners?view=o365-worldwide\r\nhttps://docs.microsoft.com/en-us/microsoft-365/commerce/manage-partners?view=o365-worldwide\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/en-us/microsoft-365/commerce/manage-partners?view=o365-worldwide"
	],
	"report_names": [
		"manage-partners?view=o365-worldwide"
	],
	"threat_actors": [],
	"ts_created_at": 1775446547,
	"ts_updated_at": 1775791286,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/d23bd2cf96f3e7427b5ab5d0033e8d00aec477d0.pdf",
		"text": "https://archive.orkl.eu/d23bd2cf96f3e7427b5ab5d0033e8d00aec477d0.txt",
		"img": "https://archive.orkl.eu/d23bd2cf96f3e7427b5ab5d0033e8d00aec477d0.jpg"
	}
}