On Demand Global Settings Current


	NOTE: Users do not need a Quest account to join an On Demand organization. However, creating a Quest account allows you to access On Demand resources such as the support site.

To join an organization with a Microsoft Entra account

Go to the web page quest-on-demand.com.

On the Welcome to Quest On Demand page, click Sign in with Microsoft.

•

If only one organization is associated with your email account, the On Demand home page opens. You are signed in to the organization that you were added to.

•

If there are multiple organizations associated with your email account, the Multiple Organizations Found page opens with a list of organizations. Click the organization you want and click Select Organization.

Managing your Microsoft Entra tenants and on-premises domains

A tenant is a dedicated instance of Microsoft Entra ID that your Microsoft organization receives and owns when it signs up for a Microsoft cloud service such as Microsoft 365. For more information, see this Microsoft help page.

This section contains information about the following activities involved in setting up your On Demand environment to manage your Microsoft Entra tenants and on-premises domains:

•

Tenants overview

•

Adding tenants

•

Managing admin consent permissions

•

Removing a tenant

•

Managing your on-premises domains

•

Adding an on-premises agent

•

Configuring an agent

•

Automatic updates for on-premises agents

•

Removing an agent

•

Adding an Active Directory domain

•

Removing a domain

Tenants overview

A tenant houses the users in a company and the information about them. You must add a tenant to manage its properties using an On Demand module.

Applications used to manage tenant properties must participate in the consent flow provided by Microsoft Entra ID. This means a Global Administrator must provide admin consent when adding a tenant to On Demand. Admin consent is granted on behalf of the Microsoft Entra ID organization.

The Tenants page provides an overview of all your tenants. It shows the number of users, consent status, and provides access to admin consent for the different On Demand modules.


	NOTE: At present, authentication for On Demand is supported only with Azure Commercial tenants.

B2C tenants

In addition to the standard Microsoft Entra tenant, you can also add a B2C tenant. On the Tenant page, B2C tenants can be distinguished by the following icon next to the tenant name:

For more information on B2C tenants, see this Microsoft help page.

Adding tenants

When you add a tenant, you must have Microsoft Entra ID Global Administrator credentials in Microsoft Entra ID since part of the process of adding a tenant is done in the Microsoft Azure portal.

The Microsoft Entra ID Global Administrator role is the top level administrator role and has access to all features. By default, the person who signs up for a Microsoft Entra ID subscription is assigned the Global Administrator role for the tenant. Additional users can be assigned to the Global administrator role.

If you are in the U.S. region, once you select Tenants and click Add Tenant, you must select the type of tenant you are adding, whether commercial, GCC, or GCC High. When you click Add Commercial or GCC Tenant (or Add GCC High Tenant) you are redirected to the Microsoft tenant administration login page where you must log in with the Global Administrator credentials for the tenant.

If you are in any other region, you select Add Tenant and are immediately redirected to the Microsoft tenant administration login page where you must log in with the Microsoft Entra ID Global Administrator credentials for the tenant. After successful authentication, the Consent Grant dialog is displayed. You must confirm the consent grant.

About GCC and GCC High tenants

GCC or a GCC High tenants are available only for deployments in the U.S. region.

Microsoft 365 GCC tenants are typically used by US public sector organizations and the contractor organizations that service them.GCC High tenants provide Microsoft 365 services that adhere to additional US Department of Defense security requirements. Customer eligibility to GCC High tenants is restricted.

•

On Demand Migration supports GCC and GCC High tenants.

•

On Demand Audit supports GCC tenants.

For more information about U.S. Government GCC High endpoints, see Microsoft 365 U.S. Government GCC High endpoints.

For more information about commercial and GCC worldwide endpoints, see Microsoft 365 worldwide endpoints.


	NOTE: Commercial tenants are hosted and managed by Microsoft.

Prerequisites for adding tenants

Admin consent is required to add a tenant to On Demand. Since only a Microsoft Entra ID Global Administrator can grant admin consent, you must be able to provide Microsoft Entra Global ID administrator credentials for the tenant you are adding.

To add a tenant

In the navigation panel on the left, click Tenants.

The Office 365 Tenants page is displayed by default.

Click Add Tenant.

If you are in any region other than the U.S region, such as Europe, United Kingdom, Canada, or Australia, you are immediately redirected to the Microsoft login page.

If you are in the U.S. region, you must select the type of tenant that you are adding:

•

Click Add Commercial or GCC Tenant

- OR -

Click Add GCC High Tenant


	NOTE: See About GCC and GCC High tenants for details.

You are redirected to the Microsoft login page.

Enter your Global Administrator credentials and click Next.

A page opens with the list of permissions that you are granting.

Click Accept.

The Office 365 Tenants page is displayed.

On the Office 365 Tenants page, at the bottom of the tile for the newly added tenant, click Edit Consents.

The Admin Consent status page opens.

If the minimum permission settings granted when the tenant was added are sufficient for a module, the Status for the module is Uses Base. If the module requires additional permissions, the Status is Not Granted.

If you need to have additional permissions for a module, click Grant Consent. You are redirected to the Microsoft login page.

Enter the Global Administrator credentials and click Next.

A page opens with the list of permissions settings you are granting.

Click Accept.

The Office 365 Tenants page is displayed. GCC or GCC High tenants are identified with a GCC or GCC High tag in the right corner of the tenant tile.

If you click Edit Consents on a GCC or GCC High tenant tile, in addition to the domain name and the tenant ID, you will also see the country code for the tenant.

Displaying a tenant name change

At a later date, if you change the display name of the tenant or the default domain name in Microsoft Entra ID, you can refresh the tenant in On Demand to immediately update the name. When you refresh the tenant, On Demand rereads the tenant information from your Microsoft Entra tenant to synchronize with the On Demand stored data.

To refresh the tenant, display the Tenants page and click the refresh icon that displays beside the tenant name on the tenant tile.