Engineering MicrosoftAdminAzure

MS365 Tenant Manager

Microsoft 365 tenant administration, Azure AD, Exchange Online, and Teams.

$skillfish add ~skills/ms365-tenant-manager

Real Examples Get Started Models & Context

Real Conversations

See how the MS365 Tenant Manager skill responds to actual requests. These are representative examples of what your AI agent will produce.

You

Rebranding acme.com to newco.com. Need to migrate 200 Exchange Online mailboxes, add the new domain, and keep old addresses working as aliases. Using PowerShell.

Agent

Exchange Online Domain Migration — PowerShell:

Step 1 — Add and verify the new domain:

# Add domain in M365 Admin Center: Settings → Domains → Add domain
# After DNS TXT verification, connect:
Connect-ExchangeOnline -UserPrincipalName admin@acme.com
Get-AcceptedDomain | Select-Object Name, DomainType  # confirm newco.com appears

Step 2 — Bulk update: new primary, old becomes alias:

$users = Get-Mailbox -ResultSize Unlimited | Where-Object { $_.PrimarySmtpAddress -like '*@acme.com' }

foreach ($user in $users) {
    $oldAddr = $user.PrimarySmtpAddress
    $newAddr = $oldAddr -replace '@acme.com', '@newco.com'
    Set-Mailbox -Identity $user.Identity \
        -EmailAddresses @{Add = "SMTP:$newAddr"; Keep = "smtp:$oldAddr"} \
        -WindowsEmailAddress $newAddr
    Write-Host "Updated: $oldAddr -> $newAddr"
}

Step 3 — Update Azure AD UPNs:

Connect-MgGraph -Scopes 'User.ReadWrite.All'
Get-MgUser -All | Where-Object { $_.UserPrincipalName -like '*@acme.com' } | ForEach-Object {
    Update-MgUser -UserId $_.Id -UserPrincipalName ($_.UserPrincipalName -replace '@acme.com','@newco.com')
}

Checklist before cutover:

Set newco.com as default domain in M365 Admin
Notify users their login UPN is changing 48h in advance
Keep acme.com MX + SPF records active for 30 days to catch in-flight mail

You

Need MFA enforced for all 150 Azure AD users except 3 service accounts. We have Azure AD P1 licenses. Security Defaults vs Conditional Access?

Agent

Use Conditional Access — not Security Defaults

With P1 licenses you have CA available. Security Defaults is all-or-nothing and cannot exclude accounts. CA gives you the exclusion you need.

Create the policy via Microsoft Graph PowerShell:

Connect-MgGraph -Scopes 'Policy.ReadWrite.ConditionalAccess'

$excludeIds = @(
    (Get-MgUser -Filter "displayName eq 'svc-deploy'").Id,
    (Get-MgUser -Filter "displayName eq 'svc-monitoring'").Id,
    (Get-MgUser -Filter "displayName eq 'svc-backup'").Id
)

$policy = @{
    displayName = 'Require MFA — All Users'
    state = 'enabledForReportingButNotEnforced'  # report-only first!
    conditions = @{
        users = @{ includeUsers = @('All'); excludeUsers = $excludeIds }
        applications = @{ includeApplications = @('All') }
    }
    grantControls = @{ operator = 'OR'; builtInControls = @('mfa') }
}
New-MgIdentityConditionalAccessPolicy -BodyParameter $policy

Before switching to enabled:

Run in report-only mode for 7 days
Review: Azure AD → Monitoring → Sign-ins → filter by this CA policy
Confirm service accounts show as excluded in every sign-in event

Harden service accounts further: They shouldn't do interactive sign-in at all. Migrate them to Managed Identities or Workload Identities — then accountEnabled: false on the user objects.

Get Started

How to install and use this skill in your preferred environment.

Skills are designed for AI coding agents (Claude Code, Cursor, Windsurf) and IDE-based workflows where the agent can read files, run scripts, and act on your codebase. Web-based AI can use the knowledge and frameworks, but won't have tool access.

Models & Context

Which AI models and context windows work best with this skill.

Recommended Models

Best

Claude Opus 4 Claude Sonnet 4 GPT-4.1 Gemini 2.5 Pro Grok 3 Kimi K2

Good

Claude Haiku 4.5 GPT-4.1 mini Gemini 2.5 Flash Grok 3 mini

Larger models produce more detailed, production-ready outputs.

Context Window

This skill's SKILL.md is typically 3–10 KB — fits in any modern context window.

8K Skill only

32K+ Skill + conversation

100K+ Skill + references + codebase

All current frontier models (Claude, GPT, Gemini) support 100K+ context. Use the full window for complex multi-service work.

Pro tips for best results

1

Be specific

Include numbers — users, budget, RPS — so the skill can size the architecture.

2

Share constraints

Compliance needs, team size, and existing stack all improve the output.

3

Iterate

Start with a high-level design, then ask follow-ups for IaC, cost analysis, or security review.

4

Combine skills

Pair with companion skills below for end-to-end coverage.

Ready to try MS365 Tenant Manager?

Install the skill and start getting expert-level guidance in your workflow — any agent, any IDE.

$skillfish add ~skills/ms365-tenant-manager

← Browse all 169 skills