Configuring Tenant-Wide Settings and Properties

In addition to branding, there are several other common settings that can be configured and impact the availability of features and services across all users.

Services

The Services tab of the Org settings window is used to configure broad tenant-wide features. Some of these may include actual services (such as Bookings or Teams), while others may impact how features are used (such as Microsoft 365 groups).

There are currently 40 different options on this page. Most of the settings are very high-level or coarse controls; fine-tuning configurations will require navigating to the appropriate service or workload’s administrative interfaces.

Table 1.4 lists the features that can be configured on the Services page.

Option	Description
Account Linking	Allow users to connect Microsoft Entra ID to their Microsoft account to earn Bing rewards.
Adoption Score	Manage the selection criteria for whose data will be included in the adoption score as well as high-level filtering options.
Azure Speech Services	Allow Azure to process emails and documents to improve speech recognition accuracy.
Bookings	Enable or disable bookings and select Bookings features organization-wide.
Brand center	Enable Microsoft 365 to set up a SharePoint site used to store branding assets for your tenant customization.
Calendar	Manage high-level calendar sharing options.
Copilot for Sales	Enable Copilot for Sales features.
Cortana	Allow Cortana features to access Microsoft 365 data.
Directory synchronization	Link to download the Entra Connect synchronization tool.
Dynamics 365 Applications	Allow Dynamics 365 to generate insights data from Microsoft 365 users. Disabled by default.
Dynamics 365 Customer Voice	Configure Dynamics 365 Customer Voice to gather survey information.
Dynamics CRM	This links to the Dynamics CRM settings (Power Platform admin center).
Mail	This links to a page to manage various Exchange mail tasks, such as audit reports, message trace reports, and spam filtering policies.
Microsoft 365 Groups	Manage features of Microsoft 365 groups, such as allowing guests.
Microsoft 365 installation options	Select the channel for Microsoft 365 app updates.
Microsoft 365 Lighthouse	Enable management of tenants by a partner through Microsoft 365 Lighthouse.
Microsoft 365 on the web	Allow integration of Microsoft 365 files with third-party cloud services. Enabled by default.
Microsoft Azure Information Protection	Link to Azure Information Protection (AIP) configuration settings (Azure Rights Management).
Microsoft communication to users	Choose whether or not users receive emails from Microsoft about the services they’re licensed for.
Microsoft Edge site lists	Manage lists of sites that should be opened in Edge versus legacy Internet Explorer mode.
Microsoft Forms	Manage sharing and external content options for Microsoft Forms.
Microsoft Graph Data Connect	Manage the use of Graph Data Connect with Azure Data Factory and Azure Synapse Analytics. If enabled, you can choose to separately allow dataset access for Viva Insights and SharePoint Online/OneDrive for Business.
Microsoft Loop	Enable access to Loop workspaces.
Microsoft Planner	Enable iCalendar access for Planner.
Microsoft Search on Bing homepage	Manage curated items to show up on Bing’s home page for users.
Microsoft Teams	Enable automatic enablement of Teams, and configure guest access enablement.
Microsoft To Do	Enable push notifications for To Do.
Microsoft Viva Insights	Enable Insights features for users.
Modern authentication	Enable modern authentication and SMTP authentication for Exchange Online.
Multi-factor authentication	Link to administer legacy per-user multi-factor authentication settings.
News	Configure News settings for the organization. News is a feature of the Bing/Edge product that displays content related to the organization’s industry and selected keywords.
Office Scripts	Enable Office Scripts within the Microsoft 365 tenant.
Reports	Manage privacy settings for reports displayed in the admin center and make usage analytics report data available to Power BI.
Search & intelligence usage analytics	Configure Microsoft search settings and digest email.
SharePoint	Manage high-level external sharing settings with a link to the SharePoint admin center for advanced sharing settings.
Sway	Enable external sharing and content integration options for Sway.
User owned apps and services	Grant users access to the Office Store as well as the ability to start trials and auto-claim licenses.
Viva Learning	Configure privacy and diagnostic data settings for Viva Learning.
What’s new in Microsoft 365	Temporarily deprecated; redirects to Microsoft Learn.
Whiteboard	Enable the Whiteboard app in Microsoft Teams.

Table 1.4: Organization-wide services and features in Microsoft 365

While you won’t be required to memorize this table for the exam, you should at least be broadly familiar with the items. As a rule, services and features are enabled through licenses—the only exception at this time is Bookings (controlled through this Services page toggle).

Security and Privacy

The security and privacy options are geared toward high-level administration or global settings of your tenant, not specifically toward content or data security. For example, Customer Lockbox doesn’t have configurable features outside of enabling it based on licensing.

Table 1.5 depicts the items currently configurable on the Security & privacy page.

Option	Description
Customer Lockbox	Enable Customer Lockbox (if licensed). Custom Lockbox enables a workflow for authorizing support personnel’s access to the tenant during incidents.
Help & support query collection	Choose whether Microsoft can collect information on the support requests made in the admin center.
Idle session timeout	Sign users out of Microsoft 365 web apps after a period of inactivity. This does not impact mobile or desktop client applications. This setting overrides session timeout policies configured in the Outlook web app and SharePoint.
Microsoft Graph Data Connect applications	Manage apps that use Microsoft Graph Data Connect.
Password expiration policy	Enable the Password Never Expire option for accounts. Does not affect synchronized accounts.
Privacy profile	Configure a privacy link and contact for your organization. This link is shown during the Teams meeting join experience.
Privileged access	Enable privileged access at the task level (separate from Entra Privileged Identity Management).
Pronouns	Enable users to display personal pronoun information in Microsoft 365 apps such as Teams and Outlook.
Self-service password reset	Link to the Azure portal to configure self-service password reset.
Sharing	Enable users to invite guests.

Table 1.5: Security and privacy settings

While you won’t be required to memorize this table, you should at least be broadly familiar with the items available—primarily enabling Customer Lockbox and setting the tenant-wide idle session timeout and the tenant-wide setting for non-expiring passwords.

Organization Profile

The Organization profile settings (Microsoft 365 admin center | Settings | Org settings) are largely informational or used to manage certain tenant-wide aspects of the user experience. On this tab, you’ll find the following settings:

Setting	Description
Custom themes	Create and apply themes to the Microsoft 365 portal for end users. You can also mandate specific themes, organization logos, and colors.
Custom tiles for apps	Configure additional tiles to display on the Microsoft 365 app launcher (sometimes referred to as the Launcher or the Waffle).
Data location	View the regional information where your tenants’ data is stored.
Help desk information	Choose whether custom help desk support information for end users needs to be added to the Office 365 help pane.
Keyboard shortcuts	View the shortcuts available for use in the Microsoft 365 admin center.
Multitenant collaboration	These settings enable you to link multiple tenants together. Multitenant organizations support cross-tenant user synchronization and provisioning (through Microsoft Entra B2B collaboration).
Organization information	Update your organization’s name and other contact information.
Release preferences	Choose the release settings for Office 365 features (excluding Microsoft 365 Apps). The available options are Standard release for everyone, Targeted release for everyone, and Targeted release for select users. The default setting is Standard release for everyone.
Send email notifications from your domain	Send system notification messages from an address linked to one of your verified domains instead of a Microsoft external address.
Support integration	Configure integration with third-party support tools, such as ServiceNow.

Table 1.6: Organization profile settings

Like the other Organization settings tabs, the settings on this page will be used infrequently—typically when just setting up your tenant and customizing the experience. As with the other Organization profile setting areas, you should spend some time in a test environment navigating the tenant to view these settings and updating them to see their effects.

Microsoft Identity and Access Administrator SC-300 Exam Guide

By : Aaron Guilmette, James Hardiman, Doug Haven, Dwayne Natwick

Microsoft Identity and Access Administrator SC-300 Exam Guide

By: Aaron Guilmette, James Hardiman, Doug Haven, Dwayne Natwick

Overview of this book

Configuring Tenant-Wide Settings and Properties

Services

Security and Privacy

Organization Profile

Microsoft Identity and Access Administrator SC-300 Exam Guide

By : Aaron Guilmette, James Hardiman, Doug Haven, Dwayne Natwick

Microsoft Identity and Access Administrator SC-300 Exam Guide

By: Aaron Guilmette, James Hardiman, Doug Haven, Dwayne Natwick

Overview of this book

Configuring Tenant-Wide Settings and Properties

Services

Security and Privacy

Organization Profile

Delete Bookmark

Confirmation

Buy this book with your credits?