The Microsoft 365 management fabric for MSPs

Every customer's Microsoft 365, under one pane of glass.

TenantFabric is the multi-tenant command centre for MSPs - identity, Intune, security, help-desk tooling and automation, across every customer, without logging into a dozen admin centres. In two editions: Business and Education.

Book a demo Compare editions

GDAP & app-only auth Least-privilege Graph access Row-level tenant isolation

tenantfabric.com/dashboard

TenantFabric MSP dashboard showing every customer tenant's posture

Built for the people who manage Microsoft 365 for a living:

Managed service providers·Multi-academy trusts·Independent schools·IT consultancies

The problem

Managing many tenants shouldn't mean many tabs.

Scattered admin centres

Entra, Intune, Exchange, Teams, Purview - multiplied by every school you manage. Context-switching all day, every day.

No single source of truth

Which devices are non-compliant? Who's missing MFA? Which tenant's connection is degraded? The answer lives in ten different portals.

The help desk leaks

Passwords pasted into chats, callers verified on a hunch, and - in schools - staff and students needing different rules entirely. The safe way is the slow way, so it gets skipped.

The platform

One portal. Every tenant. The whole estate.

TenantFabric connects to each customer's Microsoft 365 through the Graph API and gives your engineers one consistent interface for the work that used to mean a dozen logins.

Every tenant, one view

A live MSP dashboard and cross-tenant fleet overview: connection health, users, licences, devices, MFA coverage, Secure Score and open alerts - per customer, at a glance.

MSP dashboard
Tenant health
Fleet overview
Cross-tenant reports

Intune & endpoint depth

Device reporting that tells you which machines need an engineer - compliance, Autopilot health, Windows Hello, update and security-policy coverage, app deployment, all honestly computed.

Autopilot
Windows Hello
Update coverage
Security coverage

Security & response

Secure Score and Defender posture, Conditional Access, risky users, and phishing response built in - with critical events pushed to Teams and raised as SupportPal tickets automatically.

Conditional Access
Mail investigation
Teams alerts
SupportPal

Automation & governance

Scheduled automations, bulk jobs, configuration-drift detection against your house baseline, tenant comparison, and a full audit trail of who changed what, where.

Automations
Drift detection
Audit log
Exports (CSV/XLSX/PDF)

Help-desk superpowers

The safe way, made the fast way.

The day-to-day of a service desk is where tenants quietly get less secure. TenantFabric builds the secure habit straight into the one-click action - so your engineers never have to choose between doing it right and doing it now.

Passwords that never touch a chat

Reset a password and hand it over as a Password Pusher one-time link instead of plain text. It self-destructs after one view or on a timer, and the password is never written to chat, email or the audit log.

Password Pusher
One-time links
Nothing in plain text

Know who's really calling

Run a structured identity-verification flow for help-desk callers and issue a Microsoft Entra Temporary Access Pass - a time-boxed, MFA-strength credential - so a caller proves who they are before you touch their account. No more "verifying" on a hunch.

Entra Temporary Access Pass
Scripted verification
Audited caller checks

Travel without a lockout

When a user travels outside your UK geolock, grant a time-boxed Conditional Access bypass from their profile in one click - it expires on its own, so the geofence snaps back without anyone remembering to undo it.

Geolock bypass
Auto-expiring
Per-user, audited

Incidents raise themselves

Critical events - a new Global Admin, a phishing hit, a degraded tenant - are pushed to Microsoft Teams and opened as SupportPal tickets automatically, so nothing important waits for someone to notice it.

Teams alerts
SupportPal tickets
Auto-raised & updated

Every one of these is confirmed and audited. Outward-facing and destructive actions ask before they run, record who did what, and are scoped to the customers an engineer is allowed to touch.

TenantFabric fleet overview across customers

For MSPs

Worst-first, across the whole estate.

The fleet overview ranks every customer by what needs attention - devices, compliance, stale endpoints, Autopilot issues, Windows end-of-life - and drills straight into the tenant that needs you. One PDF is a board-ready estate report.

Every customer's posture on one screen
Click a row to jump into that tenant
Export the estate to PDF or Excel in a click

Two editions

Pick the edition that fits your customers.

Same platform, same engine, same honest-by-design reporting. Education simply adds the school-specific layer on top - so a commercial MSP isn't paying for cohorts and MIS it will never use.

For commercial MSPs

TenantFabric Business

The full multi-tenant command centre for MSPs, consultancies and in-house IT running Microsoft 365 for commercial customers.

MSP dashboard & cross-tenant fleet overview
Users, groups, roles, licensing & lifecycle
Intune depth - compliance, Autopilot, updates, app & security-policy coverage
Security & response - Secure Score, Conditional Access, mail investigation
Help-desk tooling - Password Pusher, Entra identity verification, travel bypass
Teams alerts & SupportPal ticketing
Automation, configuration-drift detection & full audit trail

For schools & trusts

TenantFabric Education

Everything in Business, plus the layer that understands how a school actually runs.

Everything in Business, plus:

Staff / student cohorts, auto-classified from group names
MIS sync - Arbor, Bromcom, ScholarPack and SIMS
Class Teams, email groups & security groups provisioned from the MIS
Student mail controls - block external, student-to-student & distribution lists
Per-cohort Windows Hello & Autopilot (on for staff, off for students)
Teams-policy monitoring per cohort

What's different: the Business edition leaves out the education-only features - cohorts, student mail controls, MIS integrations and class provisioning. Everything else is identical, and a Business customer can move up to Education at any time.

TenantFabric for Education

It knows the difference between staff and students.

The Education edition adds everything a school needs on top of the core platform: it classifies users into cohorts from your group names, syncs your MIS, and applies the right policy to the right people - automatically.

TenantFabric Windows Autopilot and cohort controls

Cohorts, MIS and class provisioning

Connect Arbor, Bromcom or ScholarPack (and SIMS via an aggregator), and TenantFabric pulls staff, students and classes - then shows a dry-run plan of the security groups, email groups and class Teams it would create, before anything is written.

Staff / student badges auto-detected from groups
Windows Hello on for staff, off for students - per cohort
Student mail controls: block external, student-to-student, distribution lists
Provision class Teams & groups from the MIS, with a preview first

Arbor

Direct REST sync of staff, students and teaching groups.

Bromcom · ScholarPack

Native adapters for the MIS your schools already run.

SIMS

Reached cleanly through a data aggregator - no fragile workarounds.

How it works

Live in an afternoon, not a quarter.

Connect

Onboard a customer and consent least-privilege Graph access - app-only or GDAP. TenantFabric verifies exactly what was granted.

Sync

A background sync caches each tenant's users, devices, licences, policies and groups, so every page loads instantly.

See & act

Report across the estate, fix what needs fixing, and run changes with a confirmation - every action audited.

Automate

Schedule checks, push critical alerts to Teams and SupportPal, and keep tenants aligned to your baseline.

Why TenantFabric

Honest by design.

Reporting reads from a cached snapshot and tells you when data was last refreshed. Where Microsoft Graph can't answer a question, TenantFabric says so - it never invents data to fill a gap. Every change is confirmed, scoped to the customers you're allowed to touch, and written to the audit log.

1×

portal for every tenant you manage

40+

management surfaces, unified

invented numbers - Graph limits shown honestly

100%

of changes confirmed & audited

Proof of concept available now

See TenantFabric on your tenants.

Book a walkthrough and we'll show you your own estate in TenantFabric - multi-tenant reporting, Intune, security and MIS, in one place.

Book a demo Explore the platform

Get started at tenantfabric.com · hello@tenantfabric.com