Understanding Virtual Tenants
Modified on Mon, 31 Jul 2023 at 04:45 PM
Categories
-
What's New
-
Release Information
- CoreView Release Notes September 2023
- CoreView Release Notes August 2023
- CoreView Release Notes July 2023
- CoreView Release Notes June 2023
- CoreView Release Notes May 2023
- CoreView Release Notes April 2023
- CoreView Release Notes March 2023
- CoreView Release Notes February 2023
- CoreView Release Notes January 2023
- CoreView December 2022 Release Notes
- CoreView November 2022 Release Notes
- CoreView October 2022 Release Notes
- September 2022 Release Notes
- August 2022 Release Notes
- Release 22.06 Key Features
- Release 22.05 Key Features
- Release 22.04 Key Features
- Release 22.03 Key Features
- Release 22.01 Key Features
- Release 21.12 Key Features
- Release 21.11 Key Features
- Release 21.10 Key Features
- Release 21.09 Key Features
- Release 21.08 Key Features
- Release 21.07 Key Features
- Release 21.05 Key Features
- Release 21.04 Key Features
- Release 21.03 Key Features
- Release 21.02 Key Features
- Release 21.01 Key Features
-
Release Information
- Getting Started with Customer Care
-
Getting Started with CoreView
-
Configuring
- Configuration Overview
- Creating CoreView Tenant Administrators
- CoreView Operator Uses Cases & Dependencies
- Creating a License Pool
- Understanding Virtual Tenants
- "Send As" DNS Requirements for CoreAdoption Campaigns (Optional)
- How to enforce MFA on CoreView service accounts
- Creating a License Pool
- How to ensure security for CoreView service accounts
- Disabling MFA for CoreView service accounts
- Set Conditional Access to grant access only inside the CoreView data center
-
Configuring
-
How to
-
Exchange Online
- How to check and analyze the Message Trace
- How To Configure Email Forwarding
- How to convert a Shared Mailbox to a User Mailbox
- How to convert a user mailbox to a shared mailbox in Exchange Online
- How to Create Microsoft 365 Groups for Improved Collaboration
- How To Create Shared Mailbox
- How To Create User Mailbox
- How To Grant Access To Mailbox
- How to List all the Mailboxes a User has access to in Microsoft 365
- How to remove delegates from Mailbox
- How to remove user access to Mailbox
- How to review and manage Exchange online mailbox permissions
- How to verify if a user has updated the Password
- Read Permission for Mailbox
- What are security groups and How to create it
- What is a Distribution Group and How to create it
-
Exchange Online
- Custom Actions Library
- Getting Started with CoreHybrid
-
Knowledge Resources
-
Understanding CoreView - Quick Start Guides.
- CoreView Quick Start Guide Overview and Index - Tenant Admins
- CoreView Quick Start Guide Overview and Index - Operators
- Understanding CoreView Tenant Configuration – Management
- Understanding the CoreView Operator Profile
- Understanding CoreView Operator Roles (New UX)
- Understanding CoreView Operator Roles
- Understanding CoreView Operator Delegation
- Understanding CoreView - Report Column Filtering
- Understanding CoreView Tenant Configuration - V-Tenant User Filters
- Understanding CoreView Tenant Configuration - Portal Information
- Understanding CoreView Tenant Configuration Options
-
Troubleshooting Common Issues
- Unable to see OneDrive, SharePoint and Exchange Data
- Remote Office 365 PowerShell session can Conflict CoreView Management Actions
- Why I cannot save the changes on existing License pool?
- Error when attempting to perform a Management Action
- Unable to modify the Assigned Licenses in my License Pool Report
- Enabling Permission for Endpoint Manager Actions
- How to enable permission for BitLocker keys report
-
Tenant Administration
- How to recreate Admins Read-only
- How to add an operator to the portal?
- How to enable and configure CoreView management session
- How to provide a consent to activate Azure AD Reports Feature and activate Partial Import?
- Tips & Tricks: Leverage Pivot Reports to Prototype License Pool Criteria Filter
- Tips & Tricks - How to manage email notifications for newly added Operators.
- Disable MFA from Read Only Service Accounts
- How To: Report on "Consumed Portal Licenses"
- How to Configure Allowed IP Addresses for CoreView Service Accounts
- Tips & Tricks: How to merge License Pools
- How to Use CoreView's Global Report Filters
- How to use the What If tool to check Azure AD conditional access policies
- How to Configure Allowed IP Addresses for CoreView Service Accounts
- How to Archive a Teams Group
- How to Restore a Teams Group
- On-demand Import for a Single Device in Endpoint Manager (Intune)
- Custom Actions using the Microsoft Graph API
- How to set up your tenant for the switch to Microsoft Graph API
- GraphAPI configuration: How to get Client ID and Client Secret
- How to provide consent to import exchange information
-
Reporting and Analytics
- How do I Check and Manage Calendar Permissions for a User?
- How CoreView can help you with your Microsoft 365 Chargeback Goals.
- New UX: Understanding the new License Centers
- Understanding the Savings Opportunities Dashboard
- Understanding the License Optimization center
- Understanding License Pool Snapshots report
- Understanding Call quality dashboard
- Understanding Call quality report
- Understanding User call quality report
- Understanding Teams groups activity report
- Understanding Teams Adoption Growth Report
- Understanding Endpoint Manager reports
- Understanding Teams dashboard
- Understanding Risky Users report
- Understanding Storage Dashboard
- Troubleshoot Active Users (License Usage) data
- Legacy Protocol Management
- Report Columns: Is active 30/60/90
- Quarantined Messages Report - Understanding The Reports
-
Managing and Administration
- Teams Voice: Direct Routing Support
- How to enable management function?
- Forward SMTP Address vs Forward Address management actions
- How to add the users in bulk while executing Users management actions?
- How to Create & Manage Custom Actions
- How to schedule a report to be sent automatically, and how to modify its scheduling options?
- How to schedule an alert report for the License Count
- Tips & Tricks – How to read and modify license pool report?
- Overview of CoreView Workflow
- How to delegate Workflow management using roles
- How to configure CoreView and ServiceNow integration
- How to Enable Multi Factor Authentication for Operators and Admins who Access the CoreView Portal
- How Can I Migrate from Group-Based Licenses to Direct Licenses Managed by CoreView?
- Naming convention rules
- Custom Actions: Forbidden and Warning Values
- How to add users to Distribution Group in bulk using via CSV
- Not able to manage licenses error
- Using custom action json output as an input in the workflow
- Setting the Sensitivity Label on SharePoint as a Mandatory Field
- DistinguishedName vs OnPremisesDistinguishedName
-
Understanding CoreView - Quick Start Guides.
- CoreView Product Manual
- Health Check
- Actions
-
Playbooks
-
Out-of-the-Box playbooks
- Introduction
- Overview
- Configuring predefined policies
- Edit policy settings: Set and monitor thresholds
- Edit remediation settings: Manual and automatic remediation
- Edit remediation settings: Configure attestation
- Remediation settings: Security & Identity policies
- Remediation settings: Teams Management policies
- Remediation settings: License Management policies
- Remediation settings: SharePoint & OneDrive Management policies
- Remediation settings: Exchange Management policies
-
Out-of-the-Box playbooks
- Workflows
- Learning Platform
- Internal Customer Care Resources
- Archive
- PowerShell
- Webinars and Events
- CoreVoice
- Internal Support
In this article, you will learn how setting up virtual tenants in CoreView will help you:
- Organize your IT teams the way you want
- Scale your Microsoft 365 operations
- Empower your operators to do more in Microsoft 365
Filtering Office 365 Users
The scope of data associated with a CoreView Virtual Tenant can be configured to be as broad or as narrow as your organization requires. As illustrated in the screenshots below, you can configure a Virtual Tenant to limit data based on any or all of your organization’s UPN Domains, one or more specific Delegation Filter, or any Groups.
The term Filter is used to indicate that you are filtering out (or in) data that you want to associate with the Virtual Tenant you are creating or editing. The following is an overview of the page displayed when clicking on the Users tab. This tab allows you to define the scope (boundaries) of data associated with this Virtual Tenant. The Filters applied under the Users tab apply only to user account objects.
1. Users Tab
Filters can be utilized individually or in combination. CoreView's filtering capability allows you to control the extent and depth of data access for an Operator. The scope of a Virtual Tenant can be tailored to be as broad or as narrow as your organization's business requirements dictate.
2. Delegation Filters
The Delegation Filter allows you to specify how you want to limit the scope of data associated with any user (account) objects. First, specify the attribute you want to use, followed by the filtering criteria, and then the value(s), as illustrated below. Multiple filters can be applied using AND or OR, as appropriate.
3. Domain Filters
This filter applies exclusively to an account object's UPN Domain. To search for a domain, type into the search field located below the column titled "Domain".
4. Distribution, Security, and/or Office 365 Groups
In this example, we'll use Distribution Groups, as the same rules apply to Security or Office 365 Groups. To search for a Group, type into the search field located below the column titled "Display Name" or "Name".
Filtering Office 365 Groups
You can also determine which Groups you want to grant Operators access to within the context of a Virtual Tenant. This can be configured to be as broad or as narrow as your organization may require.
1. Groups
Below is an overview of the Groups page, along with a description of each filtering option.
2. Domain Filters
Similar to the Users tab, this filter applies exclusively to an account object's UPN Domain. To search for a domain, type into the search field located below the column titled "Domain". You can add a domain to the filter by clicking the "+" icon. To remove a domain from the filter, click the "-" icon.
3. Distribution, Security, and/or Office 365 Groups
Just as with filtering by User, the same rules apply to Distribution, Security, and Office 365 Groups. To search for a Group, type into the search field located below the column titled "Display Name" or "Name".
What's Next
After creating your Virtual Tenants, you can delegate access to any individual in your organization based on your business needs. Please note that Virtual Tenants operate exclusively within the context of CoreView and are not implemented in Office 365 itself. This means that anyone you wish to delegate access to must be enrolled in CoreView as an Operator and will need to log into CoreView to perform their Office 365 administrative or analytical activities.
We highly recommend that Tenant Admins assign a new or modified Virtual Tenant to a test Operator account and then log in to CoreView using that test Operator account to ensure the configuration of the Virtual Tenant meets their expectations. |
Setting up virtual tenants for numbers
If you wish to delegate responsibility for managing numbers to delegated administrators, you can create or edit your virtual tenants to include number information.
Please keep in mind that all phone number types can be delegated to virtual tenants, ensuring a comprehensive approach to number management. |
Your V-tenants for users match your number distribution
If your virtual tenants for users match your number distribution, you can simply edit your existing virtual tenants. For example, you may break down your virtual tenants by country and want your numbers distributed by country, OR your virtual tenants are organized by department and your numbers will also be distributed to departments. However, if they don’t match, you can set up virtual tenants specifically for numbers. For example, you might want your phone numbers distributed by country, although your virtual tenants are broken down by Business Unit.
You can populate your virtual tenants based on which users are already assigned direct routing numbers. When you upload the list of direct routing numbers, you can identify the user assigned to each number. If there is a conflict between the data provided by the SBC and the data contained within Teams you can see that on the Teams Numbers report. Use the “Mismatch between Teams and SBC assignee” field to find and resolve data conflicts.
You can have a quick snapshot of your virtual tenant users who have a phone number assigned to them in a dedicated section. Please keep in mind that a user can be a part of multiple virtual tenants, in that the user and the number assigned to them will be visible in more than one virtual tenant. On the other hand, you can only distribute spare numbers to one virtual tenant, meaning that, depending on the scenario, the number assigned to a user can be allocated to your virtual tenant or not.
You can then distribute the remaining inventory based on criteria with the ability to “cap” the number given to each virtual tenant. For example, you can allocate a virtual tenant 50 numbers from the remaining UK phone number inventory.
Your V-tenants for numbers don't match your V-tenants for users
If your virtual tenants for numbers are not the same as your virtual tenants for users, an operator could have responsibility for managing a number but not the user who has the number. In this case, the operator would be able to do the following:
- Assign a number only to users matching delegation filters in the virtual tenant to which the operator delegated to managing the number is assigned.
- Unassign a number only to users matching delegation filters in the virtual tenant to which the operator delegated to managing number is assigned.
- View the User ID and UPN of the user assigned a number only to users matching the delegation filters set for users in the virtual tenant to which the operator delegated to managing number is assigned. This means that if a number that has been allocated to a virtual tenant is assigned, via means different than CoreView, to a user that is outside of the scope of that virtual tenant, the possibility to manage that number is lost until the number is unassigned from the “wrong” user.
Instructions
- Go to Settings > Virtual Tenants
- Create a new virtual tenant or access an already existing one
- Go to the Phone number tab
- Optional: Have a quick check of your configuration in the Overview tab, where you can see your number allocation rules and the amount of allocated and consumed numbers in your virtual tenant.
- Optional: Have a look at the Consumed tab to see which users assigned to your virtual tenant have a phone number assigned to them.
- Go to the Spare Numbers tab. Here, you can decide the criteria by which you want to allocate spare numbers (numbers that are not assigned to anyone or not part of any other virtual tenant) to your virtual tenant. You can decide to segregate based on a variety of attributes and, based on the amount of numbers that fit your criteria, decide to allocate all of the results or only a part of them. The filtering is dependent on the number plan type, so you can have different criteria for Teams numbers and direct routing numbers.
- Save and complete the configuration.
License Pools as Virtual Tenants
Organizations can also choose to bypass the creation of Virtual Tenants and configure CoreView to rely on their License Pool configuration as their Virtual Tenants. This option might be more suitable for smaller customers whose License Pool structure aligns with their desired Virtual Tenant configuration. Although this option is available, it is not considered a recommended practice.