On Demand Global Settings Current - User Guide

Inviting users to join an On Demand organization

Once you have added a user, inform them that they have been added to an organization and specify the email address or Microsoft Entra account used.

NOTE: Users do not need a Quest account to join an On Demand organization. However, creating a Quest account allows you to access On Demand resources such as the support site.

Managing your Microsoft Entra tenants and on-premises domains

A tenant is a dedicated instance of Microsoft Entra ID that your Microsoft organization receives and owns when it signs up for a Microsoft cloud service such as Microsoft 365. For more information, see this Microsoft help page.

This section contains information about the following activities involved in setting up your On Demand environment to manage your Microsoft Entra tenants and on-premises domains:

Tenants overview

A tenant houses the users in a company and the information about them. You must add a tenant to manage its properties using an On Demand module.

Applications used to manage tenant properties must participate in the consent flow provided by Microsoft Entra ID. This means a Global Administrator must provide admin consent when adding a tenant to On Demand. Admin consent is granted on behalf of the Microsoft Entra ID organization.

The Tenants page provides an overview of all your tenants. It shows the number of users, consent status, and provides access to admin consent for the different On Demand modules.

NOTE: At present, authentication for On Demand is supported only with Azure Commercial tenants.

In addition to the standard Microsoft Entra tenant, you can also add a B2C tenant. On the Tenant page, B2C tenants can be distinguished by the following icon next to the tenant name:

For more information on B2C tenants, see this Microsoft help page.

Adding tenants

When you add a tenant, you must have Microsoft Entra ID Global Administrator credentials in Microsoft Entra ID since part of the process of adding a tenant is done in the Microsoft Azure portal.

The Microsoft Entra ID Global Administrator role is the top level administrator role and has access to all features. By default, the person who signs up for a Microsoft Entra ID subscription is assigned the Global Administrator role for the tenant. Additional users can be assigned to the Global administrator role.

If you are in the U.S. region, once you select Tenants and click Add Tenant, you must select the type of tenant you are adding, whether commercial, GCC, or GCC High. When you click Add Commercial or GCC Tenant (or Add GCC High Tenant) you are redirected to the Microsoft tenant administration login page where you must log in with the Global Administrator credentials for the tenant.

If you are in any other region, you select Add Tenant and are immediately redirected to the Microsoft tenant administration login page where you must log in with the Microsoft Entra ID Global Administrator credentials for the tenant. After successful authentication, the Consent Grant dialog is displayed. You must confirm the consent grant.