Plenty of good providers run into Microsoft 365 problems that sit outside what they do. This is a straightforward way to hand that part to a senior administrator without handing over the customer.
You look after something for a business. Their Microsoft 365 tenant is not it, and it keeps getting in the way. The website goes live and the contact form mail lands in spam. The phone system needs a mailbox nobody can create. The insurance renewal asks whether multi-factor authentication is enforced and nobody can answer.
We take that part. You keep the customer, the relationship and the invoice you already have with them.
These are the conversations that come up most, and none of them require a formal arrangement to start.
You build the site, then inherit the email problems attached to the domain. DNS, SPF, DKIM and DMARC, mail landing in junk, a form that sends to a mailbox that was never really a mailbox.
You are excellent with the machine in front of you. The tenant behind it, with its licences, Conditional Access policies and device enrolment, is a different job and not always one worth staffing for.
Teams integration, call routing to shared mailboxes, identity that has to line up before any of it works.
The questionnaire asks about MFA, admin accounts and backups. Your customer needs somebody to make the answers true rather than optimistic. We do the technical work. We do not advise on insurance and we cannot promise a policy outcome.
You know the framework and what it requires. We implement the Microsoft 365 controls underneath it and document what changed, so your evidence is a configuration rather than an intention.
General IT support who would rather not take on a tenant cleanup, or a firm whose Microsoft 365 person just left.
The work is the same whether it arrives through a partner or directly. The difference is who holds the relationship.
This goes to the same person who would do the work. There is no partner portal and no onboarding sequence.
No. The customer stays yours. We are brought in for the Microsoft 365 work, we do it, and we hand back documentation you can keep on file.
If the customer later asks us to look after their tenant directly, we tell you before agreeing to anything. That is the part most people are actually asking about, and it is easier to answer plainly than to write a clause about it.
Some of it, and we are relaxed about how it is presented, but we do not offer a blanket white label arrangement. The findings report is written to be handed to the business owner, and it says what was checked rather than who checked it.
What we will not do is let a customer believe they have a full time internal administrator when they do not. That misunderstanding always surfaces at the worst moment.
The review is fixed scope and fixed price, agreed in writing before any access. Remediation is quoted separately once there is something real to quote against.
We are happy to talk pricing with you directly so you know what you are sending someone into. What we will not do is publish a number here that turns out to be wrong for a particular tenant.
For a review, usually within a week or two of the scope being agreed. For something genuinely broken, such as mail not arriving or an account compromise in progress, sooner.
We do not run a twenty-four hour help desk, so if your customer needs somebody at two in the morning we are not the right referral and will say so on the call rather than after.
A fixed scope review of who has access, how sign-in is protected, where mail goes and what you are paying for.
Licences, accounts, security settings and the day to day of running a tenant.
Untangle the accounts, domains and logins nobody has a full list of.
Tell us what you run into and how often. If there is a sensible way to work together we will say so, and if there is not we will say that too.