Built for MSPs running Microsoft 365

Every starter and leaver, for every client. Approved, done, proven.

IDpilot turns onboarding and offboarding into tracked workflows. AI drafts the plan, your technician approves it, and IDpilot carries it out in Microsoft 365, then reads every change back to confirm it landed. One console for all your client tenants.

Book a demo See how it works
Human approval on every change Append-only audit trail Works with GDAP
Starter Priya Shah Harbour Dental Group · starts Mon 3 Nov
Approved
Create account priya.shah@harbourdental.example Verified
Licence Microsoft 365 Business Premium Verified
Groups All Staff, Clinical, Leeds Site Verified
Laptop build & handover manual task Assigned · Sam
approved by alex.morgan · 09:14 · payload locked
verified 3 of 3 Microsoft 365 changes read back
Works with Microsoft 365 Microsoft Entra ID Exchange Online Partner Center GDAP
How it works

From a one-line request to a provable result.

  1. 01

    Describe

    Raise a starter or leaver in plain language, pick a role template, or copy access from someone already in the job.

  2. 02

    Draft

    AI drafts the full plan: account, licences, groups and the manual tasks. It only recommends. It never acts.

  3. 03

    Approve

    A named person approves the exact plan. Change one line and the approval is void, so what runs is what was signed off.

  4. 04

    Execute & verify

    IDpilot makes the changes in Microsoft 365, reads each one back to confirm it, and logs the evidence.

For MSPs

Run every client's joiners and leavers from one place.

Stop switching between admin centres and spreadsheets. IDpilot keeps each client separate and gives your team one queue across all of them.

One console, every client

See starters, leavers and open tasks across all your client tenants, then drop into any one client in a click.

Your technician's own role

Sensitive actions run as the signed-in technician, bounded by their own Entra role and your GDAP relationship with the client.

Templates per client

Every client starts with ready-made role templates. Tune licences and groups per client, or choose them per ticket.

Copy access from a colleague

"Same as Jo in reception" becomes a real plan: pick an existing user and IDpilot copies their licences and groups for review.

Manual tasks, same checklist

Laptops, door fobs, line-of-business apps: anything without an integration becomes an assigned task, chased by email.

Leavers closed, provably

A leaver report built from live directory data shows what access is left, so offboarding ends with evidence and licences come back.

Security

Security isn't a feature here. It's the pipeline.

Every privileged change in a client tenant travels the same five gates. None of them can be skipped, and every one leaves a record.

  1. 1 · plan Drafted plan Exactly what will change, before anything does.
  2. 2 · approve Approval record Who approved, which exact payload, and when.
  3. 3 · execute Run once Each action runs once and only once, even on retry.
  4. 4 · verify Read it back Microsoft 365 is checked to confirm it really changed.
  5. 5 · audit Append-only log Evidence you can hand an auditor. Never edited.
  • AI advises, people decide. The AI drafts plans and recommendations. It can never carry out a privileged action.
  • No passwords on our side. IDpilot's own identity cannot see, set or reset a password. Resets run only as your signed-in technician.
  • Destructive means deliberate. Disabling an account or removing access gets a distinct warning and an explicit review-then-confirm step.
  • Clients stay separate. Every record and every query is tied to one client. One client's data never shows up in another's view.
  • Permissions in plain words. The consent page describes exactly what your client is granting, at its broadest honest reading.
Audit log · Harbour Dental Group append-only
09:02 plan.drafted starter priya.shah
09:14 plan.approved by alex.morgan
09:14 user.created priya.shah
09:15 user.verified read back ok
09:15 licence.assigned M365 Business Premium
09:15 licence.verified read back ok
09:16 task.assigned laptop handover → sam

See IDpilot on one of your own client tenants.

A live walkthrough: connect a tenant, raise a starter, approve it, and watch it verify.

Book a demo Read the security overview