All about Granular Delegated Admin Privileges (GDAP)

GDAP or Granular Delegated Admin Privileges is a feature which grants our support team Global Administrator access to your Microsoft 365 tenant so we're able to quickly assist with the day to day admin tasks and any troubleshooting assistance.

Why would we need it?

If you're not sure how to setup your Microsoft service, or have an issue that you would like us to investigate on your behalf, or if you lose your login details, having GDAP setup allows us access your service to quickly help you. The types of tasks our team is able to help you with GDAP access is:

• Tenant setup
• Resetting user passwords
• MFA re-registrations
• Email Migrations
• General troubleshooting
• Submitting tickets to Microsoft support on your behalf

How it works

Establishing GDAP with us works in two ways:

New services

1. Log into your Synergy Wholesale Management Portal → Click Microsoft 365 → Manage Clients → Add New Client.
2. On the client creation page, click the checkbox next to GDAP. Fill out the form as per normal and click Create Client.
3. Next, purchase a subscription and login as normal to accept the MCuA agreement. The GDAP relationship process will not start until:
   • A subscription is purchased
   • MCuA agreement has been signed.
4. Within 12 hours of both conditions being met, an email will be sent to the address listed within the client details page with an approval link. You can resend the email by clicking the "Resend" button

5. Click on the link within the email or head directly to the Partner relationship page.
6. You will be prompted to sign in, Login as the Global Administrator user and click next once the partner relationship page loads.
7. You will then see Global Administrator listed as the requested roles, click Next
8. Click Accept when prompted.
9. Once accepted, GDAP should be successfully established and the GDAP status will be updated to Active.

Existing services

To establish GDAP for an existing service:

1. Log into your Synergy Wholesale Management Portal
2. Click on Microsoft 366 → Manage Clients.
3. Search for and click on the desired client > Click Manage Client.
4. Click the Request button under "GDAP Status". Then click Confirm.
5. This will email the address listed within the client details page with an approval link. You can resend the email by clicking the Resend button.
6. Click on the link within the email you receive or head directly to the Partner relationship page.
7. You will be prompted to sign in, Login as the Global Administrator user and click next once the partner relationship page loads.
8. You will then see Global Administrator listed as the requested roles, click Next
9. Click Accept when prompted.
10. Once accepted, GDAP should be successfully established and the GDAP status will be updated to Active.

Enabling GDAP by default

When creating a new Microsoft 365 client, you can choose to enable GDAP by default by:

1. Log into your Synergy Wholesale Management Portal.
2. Hover over your profile at the top right and click Account Settings
3. Click the Configurations tab at the top
4. Scroll down to Microsoft 365 and check Enabled

Removing GDAP access

If you would like to remove GDAP access, you can do so by:

1. Logging into the Microsoft Admin Center as the Global Administrator account.
2. Navigate to Settings → Partner relationships.
3. Under Granular delegated administrative privileges (GDAP), click the three dots on the the active partner relationship under "Nexigen Digital" → Click 'Remove roles'.
4. A confirmation pop up box will appear, click 'Remove roles', then 'Yes' to revoke GDAP access.