
Lighthouse Turns GDAP Migration Into a Wizard, Not a CSV Project
Microsoft 365 Lighthouse now bulk-migrates DAP to GDAP with suggested role tiers, reusable templates, and built-in JIT access. How the wizard works and how it compares to CIPP.
Archive

Microsoft 365 Lighthouse now bulk-migrates DAP to GDAP with suggested role tiers, reusable templates, and built-in JIT access. How the wizard works and how it compares to CIPP.

A December 2022 proof of concept: a custom Microsoft Teams app that answers user questions with the OpenAI completions API and reads and creates PSA tickets. Architecture, token math, and lessons.

Microsoft sets a February 27, 2023 date to enable Authenticator number matching by default, Teams Premium adds Advanced Virtual Appointments, users can delete chats, and SharePoint URL rename hits GA.

CISA's SCuBA project pairs a free M365 security baseline with ScubaGear, a PowerShell tool that grades your tenant against it. Setup steps, licensing gotchas, and a CIS Controls mapping.

Azure AD P2 auto-remediates risky users; P1 only detects them. This Power Automate flow sweeps every customer tenant for risk detections and opens a PSA ticket the moment a new one lands.

As of November 2022, Intune can schedule macOS updates, defer releases, and enforce minimum OS versions. Here is how to configure update policies, deferrals, and compliance for your Macs.

October 2022 for MSPs: Teams Premium lands at $10/user/month and absorbs existing features, GDAP's DAP removal dates firm up, and Intune previews Endpoint Privilege Management and Chrome OS.

Five Azure AD MFA controls most tenants never touch: number matching, location context, authentication strengths, and two registration reports that catch attacker-added MFA methods.

Field notes from a real GDAP migration: a seven-step checklist, the security group and PIM structure that worked, and answers on customer emails, competencies, Azure access, and distributors.

App registrations ride on DAP pre-consent. When DAP relationships disappear in early 2023, vendor integrations like IT Glue, CIPP, and HaloPSA stop reading customer tenants until re-consented.

Two ways to bulk-migrate DAP to GDAP before the deadline: Microsoft's CSV-driven CLI gives granular control, CIPP's built-in wizard gives speed. Here is how to pick, with a demo of both.

September 2022 for MSPs: Exchange Online basic auth shutoff begins October 1, the GDAP bulk migration tool runs until October 31, and Teams ships eight features from Cameo to 7x7 galleries.

Huntress's native PSA integrations stop at tickets and agreements. A Power Automate custom connector opens the full API: incident chaining, QuickBooks billing sync, and cross-vendor device reports.

Microsoft incentive rebates arrive monthly with no per-customer clarity. A Partner Center earnings export plus six columns in Power BI shows exactly which customers, products, and programs pay.

NCE commitment terms punish missed renewal dates. This Power Automate flow sweeps Pax8 subscriptions daily and opens a PSA ticket before each renewal, so seat counts get fixed before lock-in.

August 2022 for MSPs: Teams Rooms Pro replaces Standard and Premium at $40/month on September 1, DAP creation stops September 30, and Teams ships six features including bulk deployment.

The Pax8 API is free for partners and covers customers, orders, subscriptions, products, and invoices. This walkthrough connects it to Power Automate with Key Vault-backed credentials.

Microsoft's Solutions Partner designation replaces Silver and Gold with a 70-point bar, 10 new customer adds, and 500 MAU growth. Here is the scoring math and why most MSPs will fall short.