centron Assigning admin permissions
For security reasons, Microsoft introduced Granular Delegated Admin Permissions (GDAP) on 1 June 2022 to enhance security when managing customer accounts in line with Microsoft’s Zero Trust principle. The Zero Trust principle is an IT security concept. Under this principle, the provider from whom you purchase a Microsoft 365 licence is granted the minimum possible access permissions in order to minimise potential risks.
If you are a new customer purchasing a Microsoft 365 licence via centron, you must grant centron the necessary permissions in the Microsoft Admin Centre so that this licence can be created and managed in your centron account. These permissions are also required to connect domains hosted with centron to Microsoft 365. Furthermore, centron’s customer service team requires these permissions to be able to assist you with any queries regarding Microsoft 365.
If you do not assign these permissions to centron, centron will not be able to manage your Microsoft 365 licences. In this case, you will need to manage your Microsoft 365 licences yourself via the Microsoft Admin Centre, without the service and support provided by centron. This also applies if you do not reassign the GDAP to centron after the two-year period has expired.
To manage your Microsoft 365 licences independently, you will need a very good understanding of the Microsoft Admin Centre and Microsoft 365. Independent management of Microsoft 365 licences should only be carried out by experienced users. For this reason, we recommend that you assign the necessary permissions to centron for managing the Microsoft 365 licence.
First-time access to Microsoft 365
Log in to your centron account. In the main navigation bar at the top left, click on ‘Menu’ and then on ‘Microsoft 365’ (or ‘Office’ if your contract includes several different Office products).
If you have several Office contracts, please select the relevant contract in which you wish to carry out the desired action.
Click on ‘Create email address’.
If you are not sure whether you have already granted the service authorisations to centron, click on ‘Check now’ to see whether the administrative authorisations have been granted.
To grant service permissions, click on "I have not yet granted administrative permissions".
The Microsoft 365 Admin Centre login page will open.
On the Microsoft 365 Admin Centre login page, enter your admin account name and click "Next".
Enter your password and click on "Log in".
The ‘Update password’ page appears.
Enter your current password in the ‘Your current password’ field.
Enter the new password you wish to use and repeat it.
Click on "Log in".
Click "Next".
Configuring the Authenticator app and linking it to the admin account
If you are prompted to secure your account, follow the steps in this section. Otherwise, proceed to the steps in the section ‘Granting the necessary permissions for administration to centron in the Admin Centre’.
Prerequisite
Your mobile device is switched on and ready for use.
Please note: Complete the following steps quickly, as you will have to repeat the entire installation and configuration process if you exceed the time limit.
Install the Microsoft Authenticator app on your mobile device.
If prompted, allow notifications on your mobile device. Then, in the Microsoft Authenticator app, tap the plus sign (+), followed by ‘Work or school account’.
Tap "Log in".
Enter the login details for the admin account and follow the steps on the screen.
Once you have installed and set up the Authenticator app on your mobile device, click ‘Next’ in your browser.
Click "Next".
In the bottom right-hand corner of the Microsoft Authenticator app, tap ‘Verified IDs’.
Tap 'Scan QR code' and scan the QR code that appears in your browser.
The link will be activated.
Click "Next".
The following message appears in the Microsoft Authenticator app: "Approve login?"
In the Microsoft Authenticator app, tap ‘Approve’. Enter your mobile device PIN and tap ‘Next’.
The message ‘Notification approved’ appears.
In your browser, click on ‘Continue’.
Then enter a telephone number and click 'Next'.
A code will be sent to you by text message.
Enter the code and click "Next".
The text message is being verified.
Click "Next".
Click on "Done".
Assigning the necessary administrative permissions to centron in the Admin Centre: Log in to the Admin Centre if you have not been automatically redirected there.
The ‘Approve Partner Roles’ page will appear. If the page does not appear, click on ‘Partner Relationships’ in the menu bar on the left.
Please read and accept the text shown below in the ‘Duration’ section by ticking the box.
To grant centron the necessary permissions, click on ‘Approve all’.
The necessary authorisations are now being granted to centron.