Re-onboarding the Microsoft 365 tenant
Introduction
In some situation it may be required to re-onboard the Microsoft 365 tenant in Enforce365. For example:
- The Microsoft 365 Application Registration (Enforce365) was changed or deleted.
- The Microsoft 365 Enterprise Application (Enforce365-Portal) was changed or deleted.
- The onboarding process failed before completing due to issues at Microsoft.
- The log keeps showing errors related to accessing the Microsoft 365 tenant.
These issues can usually be fixed by offboarding and then onboard again.
No information will be lost during this process.
Re-onboarding
To Offboard a Microsoft 365 tenant from the Enforce365 product, click the Offboarding menu item.
This will remove the Enforce365 application registration and the Enforce365-Portal enterprise application from the Microsoft 365 tenant, and any role memberships held by these.
To start the Offboarding click Offboard this tenant.
When offboarded the below will show.
If you need re-onboard the Microsoft 365 tenant into Enforce365, you will have to wait a few minutes.
To Onboard the Microsoft 365 tenant again, click the Onboarding menu item.
During the process, the Global Admin must accept the multiple Permission requests (Microsoft consents) shown at various points.
Follow the onscreen guide to complete the onboarding process.
When process is completed the tenant is onboarded in Enforce365.
After approx. 30 minutes data will be collected from the tenant and will be available in reporting. The exact time is shown on the dashboard page for the portal.
It is recommended to let this initial job complete before any other jobs are started manually!
The following will show in the logs if onboarding is successful:
- Updating onboad state to 'Onboarded'
- Updating RequiredResourceAccess for Applications[Enforce365], with the following configuration: *** OK
- The RequiredResourceAccess for Applications[Enforce365], has been updated: *** OK
- (One or more of these) The Membership configuration for DirectoryRoles[*].Members[Enforce365] relation, has been created. OK
See the following articles for permission requirement descriptions:
https://support.enforce365.com/support/solutions/articles/56000007863-Enterprise-Application-Reference-Enforce365-Portal
https://support.enforce365.com/support/solutions/articles/56000007864-Application-Registration-Reference-Enforce365-default-READ-permissions