Introduction

Microsoft is taking steps to protect access to Customer data as part of their commitment to increase the security of their ecosystem. A major part of this initiative is the transition from Delegated Admin Privileges (DAP) to Granular Delegated Admin Privileges (GDAP), to be completed by March 2023. See our initial Announcement on Transitioning from DAP to GDAP. 

 

As part of their support for Partners, Microsoft has created a Bulk Migration Tool for transitioning large numbers of users at a time without requiring end customer consent (as consent is implied). The Bulk Migration Tool is now available for general use until at least March 1, 2023. This blog provides some information about the tool and other resources from Microsoft.

Scope of Impact 

  • Partners: All Microsoft Direct Bill Partners, Indirect Providers, and Indirect Resellers
  • Licensing: Cloud Solution Provider (CSP) 
  • Cloud: Microsoft Cloud International (MCI) 
  • Products: All Microsoft 365, Dynamics 365, Power Platform, and Azure 
  • Geography: Worldwide

What is Microsoft providing? 

The Bulk Migration Tool is now available from Microsoft. This tool will not require end customer consent for migrating existing DAP relationships to GDAP. End Customer consent is implied if there's a pre-existing active DAP relationship. 

 

You can get started by reading the GDAP bulk migration tool page in the Microsoft Partner Center.


The GDAP bulk migration tool FAQ also contains very useful information. 


If you require further assistance, contact your Microsoft Account Manager or place a Service Request with the Microsoft Partner Center.

What is Ingram Micro Cloud recommending? 

Ingram Micro Cloud is providing advice and information on best practices for transitioning DAP relationships to GDAP relationships. We recommend Partners use the Microsoft Bulk Migration Tool. Please keep in mind that it is scheduled to be available until March 1, 2023.

 

Partners who do not use the GDAP Bulk Migration Tool will need to use the standard GDAP Processes detailed in the Introduction to granular delegated admin privileges (GDAP) page. These activities WILL REQUIRE CUSTOMER CONSENT for any modifications and/or net new activations as detailed in the Customer approval of partner GDAP request page.

What are the key dates? 

  • August 2022: General availability of DAP to GDAP bulk migration tool
  • Start of Q1 CY23 (no earlier than Jan 17): Disable 90-day inactive DAP relationships 
  • Start of Q1 CY23 (no earlier than Jan 17): Stop DAP creation for new customers and new reseller relationships 
  • March 2023 (no earlier than Mar 1): End of no consent window for DAP to GDAP transition tool 
  • Q1 CY23 (no earlier than Mar 1): Transition remaining active DAP to limited GDAP roles 

 

Please note that these dates are from Microsoft and are subject to change.

 

Dates with "no earlier than..." are targets. Exact dates will be supplied by Microsoft in the future.

How can I learn more? 

We will be posting additional information on GDAP as we move toward the March 2023 deadline. For now, you can use these resources: