Six groups of things you currently do by hand
Nothing here is aspirational. Every feature below is shipped and running in the product today — and every one of them is in the live demo if you would rather click than read.
Multi-tenant command centre
One login, every client.
Switch between the Microsoft 365 tenants you manage without re-authenticating anywhere. Everything you would open a separate admin portal for lives on one screen.
Full user directory
Create, edit, disable, offboard and bulk-create users in any tenant you manage.
Group management
Microsoft 365 groups, distribution lists and security groups, handled in one place.
Mailbox operations
Forwarding, out-of-office auto-replies, conversion to shared, and storage statistics.
Mailbox delegation
Full Access, Send As and Send On Behalf granted or revoked in a couple of clicks.
Calendar permissions
See who can view or edit a calendar, and change it without leaving the page.
Identity map
A visual map of how one person connects to their groups, devices, delegations and third-party accounts.
Joiners and leavers, on rails
Turn "new starter" emails into a controlled, repeatable process.
You design the form once. Your client fills it in. The platform runs every step and shows you exactly what happened.
Form Builder
Design each client’s new-starter and leaver forms visually. Add your own questions, branching logic and automatic follow-up actions. Simple page-by-page mode for everyday edits, advanced canvas for power users.
Branded public forms
Each client gets their own link, styled with their logo and colours. Their office manager fills it in; nobody needs an account or training.
Approval queue
Requests arrive in a queue. Review, edit, approve or reject, and watch each step complete live as it runs.
Scheduled offboarding
Set a leaver’s last day in advance. The platform does the work on the day, unattended.
Retry a single failed step
If one step of twelve fails, fix it and re-run just that step instead of starting the whole thing over.
OneDrive archiving
A leaver’s files are archived to SharePoint with live progress, so nothing is lost when the account closes.
Reusable building blocks
Build a form section once, save it, and drop it into any client’s form.
Device management
Know which laptop is a problem before someone tells you.
A complete Intune picture for every tenant, with the machines that need attention pushed to the top rather than buried in a list.
Managed device inventory
Who has what, whether it is compliant, whether the disk is encrypted, and when it last checked in.
Remote actions
Sync, restart, lock, locate, reset passcode, retire or wipe a device.
Background compliance scan
Automatically flags non-compliant, unencrypted and stale devices, and raises an alert.
Heimdal Security integration
Matches Heimdal-protected endpoints against Intune records by serial number, so you can spot machines present in one system but missing from the other.
Security and oversight
The questions an auditor asks, already answered.
The gaps that matter are usually the ones nobody thought to check. These checks run whether or not anyone remembers to run them.
MFA overview
Every user’s registered sign-in methods across every tenant. Highlights users with no MFA, admins left unprotected and outdated methods. Exports to Excel.
Sign-in intelligence
Microsoft sign-in logs are pulled in and analysed for impossible travel, repeated failed logins, sign-ins from new countries, out-of-hours activity, legacy protocols and guest account use.
Conditional Access viewer
Browse a tenant’s access policies in readable form, with cryptic IDs resolved into real user, group and app names. Strictly read-only, and it never changes a policy.
Offboarding hygiene sweep
Scans every tenant for accounts that were never properly closed: still licensed, still in groups, still able to sign in. It then fixes them in bulk.
Full audit trail
Every action logged with who did it, when, and to whom. Records stay attached to the right person even after an account is renamed during offboarding.
Cost control
Stop paying for seats nobody uses.
Licence waste is invisible by design. It never generates an alert, it just quietly renews. This makes it visible at the moment you can do something about it.
Licence dashboard
A visual breakdown of what each tenant owns, what is assigned, and what is sitting idle.
Cost at the point of decision
When you assign a licence you see what that seat actually costs, before you assign it, not on next month’s invoice.
Health score per tenant
A simple score highlighting reclaimable seats: disabled users still holding paid licences, guests with paid licences, and so on.
Pax8 integration
Compare what you are billed for against what Microsoft says is actually in use, across your whole client base, in one table. Adjust subscription seat counts without leaving the platform.
Built for MSPs to resell
It is a platform, not just a tool.
Everything a service provider needs to put this in front of their own clients without it looking like someone else’s software.
Multiple organisations
Many organisations on one deployment, each with its own plan, user limit and tenant limit.
Instant suspend and reactivate
Suspend or bring back an organisation immediately.
Role-based access
Super Admin and Admin roles, with per-user restrictions on which tenants they can see.
Single sign-on
Each organisation connects its own Microsoft Entra ID for staff login, optionally enforced, with automatic provisioning for approved email domains.
Self-service password reset
Staff reset their own password by emailed code.
White-labelling
Your company name, logo and brand colours applied to the client-facing forms.
Onboarding does not stop at Microsoft
When a new starter is approved, accounts can be created automatically in the other tools they need on day one.
Microsoft Teams
Team and channel membership
Slack
Workspace invitations
Asana
Project workspace access
HubSpot
CRM seat provisioning
Tableau
Analytics licences
1Password
Vault access
Expensify
Expense accounts
Guru
Knowledge base access
Nexudus
Workspace membership
Brivo
Door access credentials
Koho
Account provisioning
Evolia
Scheduling accounts
Need something that is not listed? Tell us what you use.
The small things
None of these will sell the product on their own. Together they are the difference between software you tolerate and software you stop noticing.
- Live progress bars and notifications, no refreshing
- In-app notification centre
- Email notifications for submissions, approvals and completions
- Saved filters and fast search across large user lists
- Generated passwords shared as expiring, one-time links
- Dark and light themes
- Scheduled database backups with a health indicator
Reading about a dashboard is a poor substitute
The demo drops you straight into a fictional agency with 120 users, nine people without MFA and a few thousand a year of licence waste. It is the tenant most people recognise.