As part of their commitment to increase the security of their ecosystem, Microsoft is taking steps to protect access to customer data. A major part of this initiative is the transition from Delegated Admin Privileges (DAP) to Granular Delegated Admin Privileges (GDAP), to be completed by January 2023. For additional details, see our initial announcement on transitioning from DAP to GDAP.

As part of their support for partners, Microsoft has created a Bulk Migration Tool for transitioning large numbers of users at a time without requiring end customer consent (as consent is implied). The Bulk Migration Tool is now available for general use until November 30, 2022. This blog provides some information about the tool and other resources from Microsoft.

Scope of Impact

• Partners: All Microsoft Direct Bill Partners, Indirect Providers, and Indirect Resellers
• Licensing: Cloud Solution Provider (CSP)
• Cloud: Microsoft Cloud International (MCI)
• Products: All Microsoft 365, Dynamics 365, Power Platform and Azure
• Geography: Worldwide

What is Microsoft Providing?

The Bulk Migration Tool is now available from Microsoft. This tool will not require end customer consent for migrating existing DAP relationships to GDAP. End Customer consent is implied if there's a pre-existing active DAP relationship.

You can get started by reading the GDAP bulk migration tool page in the Microsoft Partner Center.

The GDAP bulk migration tool FAQ also contains additional information.

For further assistance, contact your Microsoft Account Manager or place a Service Request with the Microsoft Partner Center.

What is Ingram Micro Cloud Recommending?

Ingram Micro Cloud is providing support and information on best practices for transitioning DAP relationships to GDAP relationships. We recommend partners use the Microsoft Bulk Migration Tool. Please keep in mind that it is scheduled to be available only until November 30, 2022.

Partners who do not use the GDAP Bulk Migration Tool will need to use the standard GDAP processes detailed in the Introduction to Granular Delegated Admin Privileges (GDAP) page. These activities WILL REQUIRE CUSTOMER CONSENT for any modifications and/or net new activations as detailed in the Customer approval of partner GDAP request page.

What are the Key Dates?

Please see this announcement from November 15, 2022.

Starting November 15, 2022:

• Email notifications to customers: No email notifications will be sent to customers when a partner disables a delegated admin privileges (DAP) relationship.

Starting December 1, 2022:

• Subscription cancellation: Partners will be able to suspend Azure plans and related subscriptions within Partner Center. Further details will be released closer to availability.

Starting January 17, 2023:

1. Microsoft will no longer create DAP relationships when a new customer or reseller relationship is created. Partners will need to request GDAP Azure AD roles from customers to manage them.
2. Microsoft will start removing inactive DAP relationships that haven't been used in 90 or more days.

Starting March 1, 2023:

1. The Bulk Migration Tool to upgrade existing DAP connections that were granted by customers to GDAP will no longer be available.
2. Microsoft will begin transitioning active DAP relationships to GDAP with limited Azure AD roles to perform least-privileged customer management activities. Partners should follow the guidance to continue to have access to Azure subscriptions after the limited roles are granted.

Please note that these dates are from Microsoft and are subject to change.
Dates with "no earlier than" are targets. Exact dates will be supplied by Microsoft.

Where Can You Find More Information?

We will be posting additional information on GDAP as we move toward the January 2023 deadline. 
In the meantime, please explore these additional resources:

•    Read the Granular delegated admin privileges (GDAP) section of the Microsoft Partner Center.
•    Read the GDAP frequently asked questions section of the Microsoft Partner Center.
•    Read the Securing the partner and customer ecosystem section of the Microsoft Partner Center.