Microsoft 365 Tenant Manager — Security & Safety

Microsoft 365 Tenant Manager provides expert guidance and automation for Microsoft 365 Global Administrators, covering tenant setup, user lifecycle management, security hardening, and offboarding. It generates PowerShell scripts and JSON plans for bulk operations, Conditional Access policies, license management, and compliance reporting.

engineering claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Generates PowerShell scripts for bulk user provisioning, license management, and offboarding.
Provides step-by-step workflows for tenant setup, security hardening, and user offboarding.
Includes Python generators for deterministic creation of tenant plans, user scripts, and admin scripts.
Offers security audit commands to export Conditional Access policies and identify users without MFA.
Enforces best practices like starting policies in report-only mode and using -WhatIf for destructive operations.

🎯 When to use it

When setting up a new Microsoft 365 tenant, including DNS configuration and user provisioning.
When performing security audits or implementing Conditional Access and MFA policies.
When managing user lifecycle tasks such as bulk creation, license assignment, or offboarding.
When needing to generate PowerShell scripts for repetitive administrative tasks.

🚀 How to use

Trigger by asking for Microsoft 365 tenant administration tasks, such as 'Set up a new tenant' or 'Create a security audit script'. Provide necessary inputs like domain name, CSV files for users, or JSON configs. Example prompts:

Generate a PowerShell script to bulk create users from users.csv and assign E3 licenses.
Create a Conditional Access policy to require MFA for all users, starting in report-only mode.

📄 Output: PowerShell scripts, JSON configuration plans, and CSV reports for tenant management tasks.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/engineering-team/skills/ms365-tenant-manager .claude/skills/ms365-tenant-manager

Skill source: engineering-team/skills/ms365-tenant-manager/SKILL.md

⚠️ Good to know

Requires Global Administrator or appropriate admin roles and the Microsoft.Graph PowerShell module; advanced features may require E3/E5 licenses.

❓ FAQ

What permissions are needed to use this skill?

Global Administrator is required for full tenant setup, but User Administrator, Security Administrator, and Exchange Administrator roles are sufficient for specific tasks.

How should Conditional Access policies be deployed?

Start policies in report-only mode, review sign-in logs for 48 hours, then change the state to 'enabled'.

What is the recommended approach for bulk user creation?

Validate the user data first using the Python generator with --action validate, ensure all entries are valid, then generate the creation script.

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.