Share via

Manage multitenant org settings

Management of various multitenant org settings can be found in the Microsoft admin center. Some settings may only be managed by owners in the MTO while others can be managed by each tenant themselves. Below are details regarding the available multitenant org settings in the Microsoft Admin center.

Edit multitenant organization name

Only an owner tenant can edit the MTO name in an MTO.

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To edit the multitenant organization name for your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.
  2. Expand Settings and select Org settings.
  3. On the Organization profile tab, select Multitenant collaboration.
  4. Select Manage settings.
  5. Select Edit under Multitenant organization name.
  6. Enter the new multitenant org name.
  7. Select Save changes.

Edit tenant role for multitenant org tenant

Only an owner tenant can change a tenant's role in an MTO.

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To edit the tenant role for a tenant in your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.
  2. Expand Settings and select Org settings.
  3. On the Organization profile tab, select Multitenant collaboration.
  4. Select the associated tenant for which you would like to change their role.
  5. Under Details select Edit under Tenant role.
  6. Select either Owner or Member.
  7. Select Save changes.

Manage calendar sharing for tenants in your MTO

Calendar sharing allows users in each multitenant organization (MTO) tenant to view free/busy (time only) calendar availability information.

Note

Calendar sharing via Multitenant collaboration portal is currently not available in Microsoft 365 GCC, GCC High, DoD, or Microsoft 365 China (operated by 21Vianet).

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To manage free/busy calendar sharing for tenants in your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.
  2. Expand Settings and select Org settings.
  3. On the Organization profile tab, select Multitenant collaboration.
  4. Select Manage settings.
  5. Select Edit calendar settings under Calendar.
  6. Select tenants to enable free/busy calendar sharing.
  7. Select Save changes.

The calendar sharing feature for MTO utilizes Organization relationships in Exchange Online. The organization relationship will share all users calendar availability and must also be set up by the other tenants in your MTO for free/busy information to be shared.

Troubleshoot calendar sharing issues

There are a couple of reasons that calendar sharing enablement might not work as it should:

  1. "Failed to edit or create an organization relationship with [tenant]. Please try again later"

    1. This error typically only requires a refresh after some time. If error persists, review the setting in Exchange Online to see if there's an existing organization relationship with this tenant.

  2. "Failed to get all domain names for [tenant]. This is an issue with how [tenant] has their primary domain name configured."

    1. This error typically requires the partner [tenant] to manage the status of their default domain here: https://admin.microsoft.com/#/Domains. Additional details regarding domain troubleshooting can be found here: Manage domains

  3. "Failed to create a new organization relationship with [tenant]. This could be due to a duplicate organization relationship."

    1. Review existing organization relationships in Exchange Online to see if one already exists with this tenant. If organization relationship already exists with [tenant], review settings to ensure it's set up as desired.

Manage Teams collaboration setting (Preview)

The Teams collaboration setting allows users to communicate with synced users from other multitenant organization (MTO) member tenants in Microsoft Teams. When enabled, users can collaborate across tenants through scenarios such as Teams search, calling, chat, and meeting scheduling.

Note

Teams collaboration setting is in a private preview stage of development. As an unfinished project, any information or availability is subject to change at any time. Teams collaboration setting is covered by the preview terms of the Microsoft Universal License Terms for Online Services.

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To manage Teams collaboration for tenants in your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.

  2. Expand Settings and select Org settings.

  3. On the Organization profile tab, select Multitenant collaboration.

  4. Select Manage settings.

  5. Select Edit under Teams collaboration.

  6. Select Edit in Microsoft Teams admin center to make update.

This is a mutual configuration, meaning that all participating tenants must enable this setting for cross-tenant Teams collaboration to function.

Set up MTO user labels in Teams for tenants in your MTO

MTO group admins can now configure an optional label for each tenant that will be displayed alongside MTO synced user's display name in Teams. This allows MTO synced users to be distinguishable within the MTO in Teams interactions.

Teams people card shows MTO user label "US".

Fig 1: Teams people card shows MTO user label "US"

Teams MTO search

Fig 2: Teams search experience shows MTO user label “US”

Only MTO owners can manage the MTO user labels. Label changes may take some time to process and will only apply to active tenants.

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To manage MTO user labels for tenants in your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.

  2. Expand Settings and select Org settings.

  3. On the Organization profile tab, select Multitenant collaboration.

  4. Select Manage settings.

  5. Select Edit under Tenant label.

  6. Select either:

    1. No label.
    2. Use the multitenant organization name for all tenants.
    3. Custom (assign a label for each tenant, which can't be blank).

  7. Select Save changes.

Manage multitenant org notifications

Admins can opt-in for MTO notifications to ensure they don’t miss any updates or changes to their MTO. Receive email notifications regarding any updates to the MTO such as: a new tenant joined the MTO, a tenant left the MTO, an MTO setting changed (user labels, owner/member role, MTO name), or user sync status changed (Must have full-mesh sync set up via Microsoft 365 admin center). Email notifications are sent daily, as long as any updates were made to the MTO. No notification is sent if nothing has changed.

Additionally, in the MAC MTO portal you can review the updates and see any Microsoft recommended actions. Opt-in and select the user(s) in your org who you would like to receive the notifications.

activity center

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To manage MTO notifications:

  1. Sign in to the Microsoft 365 admin center as a global administrator.
  2. Expand Settings and select Org settings.
  3. On the Organization profile tab, select Multitenant collaboration.
  4. Select Manage settings.
  5. Select Edit under Email notifications.
  6. Select Allow email notifications.
  7. Enter the email addresses you would like to receive the notifications.
  8. Select Save changes.
  9. Grant permissions requested in dialog box.

Permissions

To enable multitenant org notifications, you must grant application permissions for the following actions:

These permissions are required to fetch cross-tenant synchronization details and to gather the status of the cross-tenant sync jobs.

This permission is required to gather details regarding the multitenant organization.

Manage Outlook external tag removal for MTO members

If a tenant has enabled external tags in Outlook to help users identify content from external tenants, MTO group admins can now choose to suppress these tags for members of the multitenant organization. This setting allows for a more seamless collaboration experience and admins can enable this setting in the MAC MTO portal.

Screenshot that shows suppression of Outlook external tag for MTO members.

If the tenant hasn't enabled external tags in Outlook, checking the External tag suppression option will automatically create a remote domain for the partner tenant and mark it as internal (i.e., IsInternal = true), but it won't have effect in end user experience. In this case, external tags aren't displayed to members in MTO.

Important

Microsoft recommends that you use roles with the fewest permissions. Using least-privileged accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.

To suppress Outlook external tag for tenants in your MTO:

  1. Sign in to the Microsoft 365 admin center as a global administrator.
  2. Expand Settings and select Org settings.
  3. On the Organization profile tab, select Multitenant collaboration.
  4. Select Manage settings.
  5. Select Edit external tag settings under External tag.
  6. Select Suppress Outlook external tag for MTO members.
  7. Select Save changes.
  • Last updated on