Microsoft 365 and cloud
Mail, files and accounts, in your tenant
Administration of Microsoft 365 for Cornwall organisations. The tenant remains in the organisation's name, joiners and leavers follow a written instruction, and the live service is not treated as a backup.
Whose tenant it is
Microsoft 365 work is done in a tenant that belongs to the organisation. If you already have one, we administer that. If one is needed, it is created in your name. You keep ownership of the tenant when the work ends.
The invoice for licences can stay with you or with a reseller you already use. Administration and the licence invoice are allowed to remain separate. This practice does not require the buying relationship to move, and it does not describe itself as a partner of Microsoft.
Joiners and leavers
A joiner receives an account, a mailbox, and access to the files and groups that match a role you have written down. Access is copied from a named role, not from whatever a neighbouring account happens to have accumulated.
A leaver's access is removed on the day you tell us they have left. The mailbox is then handled as you instruct: kept and converted, forwarded for a period you set, or deleted. Shared mailboxes are checked so the leaver's sign-in is not still a member. The instruction and the result are both noted.
Mail, files and sharing
We set up or tidy shared mailboxes, sharing links and the places teams keep files. Links that grant access to anyone who has the address are listed for you, and removed when you say they should not be there. External sharing is allowed only where you have asked for it.
Mail flow changes, such as a new domain or a rule that redirects messages, are described before they are applied, because they can interrupt correspondence. Administrator accounts are named people, with multi-factor authentication on those accounts. A shared administrator password is not left as the way in.
What this work does not replace
Microsoft 365 is the live service people use. It is not a backup. Deletion, overwrite and encryption can remove mail and files from the tenant. If you need to restore them, that is the backup service, with copies kept apart from the tenant.
Day-to-day questions from staff can sit here as a bounded piece of administration, or inside managed support if you want a broader agreement. The accountable person is named either way. Data in the tenant stays the organisation's, and admin access is recorded and removed when the work ends.