Configuration: Add a Tenant

---

Add a Tenant to Cayosoft Guardian

Adding your Entra ID/Office 365 cloud tenant immediately enables change monitoring and data backup for continuous protection against unwanted changes.

Create an Entra ID/Office 365 Connection Account

• Make this Connection Account a member of the Global Administrators role.
• Add a Microsoft 365 license to this account if the account needs to send alerts through Microsoft Teams or Microsoft Exchange.

Add an Entra ID/Office 365 Tenant

1. Sign in to Cayosoft Guardian using your Guardian Global Admin account (The person who installs the product automatically becomes a Guardian Global Admin.)
2. To add Entra ID /Office 365 tenant click Add tenant in Entra ID/Office 365 section in the Home:
   
   
   
   
3. In New Microsoft 365 tenant wizard specify the Office 365 account to connect to Office 365.

   Office 365 connection account should hold the Global Admin Role in the target Entra ID/Office 365 tenant and must be a cloud-only account, i.e. not synchronized with on-premises Active Directory.
   
   
   If you want to use legacy authentication, see the step-by-step procedure in the section provided below.

4. Click Next.
5. To access a tenant, the Cayosoft Guardian Connection Account must be granted the administrator's consent. Click Grant: 
   
   
   
6. The web browser will open, and you will need to sign-in with the Guardian Connection Account. 
   1. Specify the password for Entra ID/Office 365 Guardian Connection Account and click Sign-in.
   2. Click Accept.
   3. In New Office 365 Tenant wizard, verify that Consent status changed to Granted
   4. Click Next 
7. When using modern authentication, Cayosoft Guardian also requires administrator consent.
   
8. Verify that the tenant was successfully added and click Close.

As a result, this new tenant will appear in your list of managed tenants in Entra ID \ Microsoft 365 section in the Home.

Two jobs will be configured: 'Default Azure AD Backup Job' and 'Default Audit Job'. By default, jobs are configured in continuous run mode. In case you need to run jobs at specific time, you can modify job settings under the Jobs node. Once the job completes the initial data collection, it would start to collect change records on each run. Navigate to Change History node to see what was changed in your tenant.

 

Adding managed tenant using legacy authentication method

1. For legacy authentication, click Use legacy authentication (password flow), specify Account password and click Next: 
   
   
2. To access a tenant, Guardian must be granted admin consent. Click Grant: 
   
   
3. Specify the password for Office 365 account and click Sign-in.
4. Click Accept.
5. In New Microsoft 365 tenant wizard, verify that Consent status is Granted now.
6. Click Next.
7. Verify that the tenant was successfully added and click Close.

How to add/delete credentials 

To edit the credentials: