Managed IT • Cybersecurity • CloudCODISE-IT field guide · October 2026
A Microsoft 365 checklist for office managers
Make joiners, leavers and account security easier to manage.
1. Own the tenant
Know which company administrators can access your tenant and who provides support. Avoid relying on one undocumented personal account.
2. Review privileged access
Keep administrative access limited to the people who need it. Use separate administrative accounts where appropriate and enable MFA.
3. Document onboarding
Create a checklist for licensing, email, shared files and approved groups. Record who authorizes access.
4. Document offboarding
Agree when access is revoked, how business files are preserved and how email continuity is handled. Review delegated access after staff changes.
5. Understand recovery
Ask what retention settings and backups cover, what they exclude, and how to recover a deleted mailbox or file. Test a recovery process with your provider.
General operational guidance. Consult your IT provider and designated advisers about your specific environment.