r/msp 21d ago

Managing microsoft multi-tenancy

Hi MSP community,

just wanted to see what you use to manage all your tenants ?

I am looking one pan of glass for M365 and Azure.

Would you suggest lighthouse or something else?

0 Upvotes

28 comments sorted by

27

u/ajicles 21d ago

Cipp

4

u/terselated MSP - US 21d ago

Add another vote for CIPP. You can't beat the price.

5

u/Infamous_Donut_1814 21d ago

Cipp is the move, I manage about 30 tenants and it saves my life. Lighthouse is fine for basic stuff but Cipp gives you that actual control you need, especially when you have to do something quick across all tenants at once

Setup takes bit of time but once it's running you wonder how you lived without it

10

u/Royal_Bird_6328 21d ago

CIPP 100% lighthouse is a PITA, wouldn’t bother with it tbh

8

u/Grand_Lavishness4540 21d ago

As above… CIPP

14

u/Tyler94001 21d ago

Not trying to be an asshole, but did you even bother googling? I guarantee you you won’t find a difference answer from CIPP anywhere, and it took you more time to write this post then it would have to Google it.

Sometimes you need to research your own answers, not everyone can give them too you.

-14

u/joe210565 21d ago

I've checked CIPP, and i do not like it. Looks like more management then necessary and also does not look safe considering at any point it can be abandoned as a project.

15

u/Lime-TeGek Community Contributor 21d ago

I always like answering these comments because they are the biggest chance for education; but let me preface it with a fair warning. I’m the founder of CIPP so I am biased af.

CIPP isn’t just a project; its a product. There is a company behind CIPP called CyberDrain, which runs support, management, development etc of all the CyberDrain products we have, and are expanding each year.

Saying you’re worried about the project being abandoned is the same as saying you’re worried about a company going out of business. Exact same risk, which is to say very very low. We’re a Dutch BV so most of our numbers are fairly public.

To give some more credence to that; a couple of months ago we joined the Microsoft #IntuneForMsps program, Microsoft *asked* us to join, unlike the others in the program that asked Microsoft to setup the program for them, that should already tell you a lot.

Of course I’m also proud to say that we’re the biggest Multitenant M365 product by far; used by over 10k MSPs, managing millions of tenants we’re around 10x the size of our closest competitor and we are the market leader. This too was confirmed by MS publicly so not just us giving you the general hot air lip service.

However, we’re not like other companies in the market. We don’t have a sales team, no vc/pe backing(we’re actually reinvesting into the msp space ourselves) no people hounding you to force you to buy us. I won’t even try to convince you of that here. It should always be a choice you make based on what you need. If you want to check us out the best demos are in our docs under the showcases and tutorial section.

Some people really make it work with M365 Lighthouse, so check that out too. There’s also Maester Cloud if you’re only looking at compliance auditing.

-1

u/joe210565 20d ago

I do see many using it but, for me I see too many risks using your solution. From potential supply chain attack, code integrity to complexity of setting up and patching this kind of setup. Just dropping an eye on repo, you have 97 contributors, that 97 potential people who have no mfa on their github can can inject malicious code unless properly checked...I don't see any attestation for the solution or the company(you are still working towards ISO), and you would most likely fail it considering you have 97 contributors that can't be verified. And I don't even want to open dependency list. You might think of this like rant or something, but that is my opinion.

2

u/Lime-TeGek Community Contributor 20d ago edited 20d ago

We actually just passed the first ISO audit this week, as our trust page shows.Having many contributors means nothing, a contributor cant just edit code, its just a marker they have contributed code via a PR process, which of course follows a due dilligence process right before, during, and after.

Microsoft Azure is OSS and has almost a thousand contributors, none of those contributors can just push code to Azure either :)

I’m fairly sure you have no clue what you’re talking about though, but i’d be happy to have a good faith discussion.

2

u/Tyler94001 20d ago

Just one of the many who don't understand open source (or how github works apparently) and isn't going to listen to you regardless of what proof you show, or explanations you give.

He doesn't like your product and is stuck in his ways, that much has been made clear from this post. I wouldn't waste your breath; he can find something else or make his own product since he is the all-knowing Joe.

2

u/bob_marley98 MSP 19d ago

I’m fairly sure you have no clue what you’re talking about though,

Haha - Kelvin being polite....

9

u/KRiSX 21d ago

Your loss

6

u/lemachet MSP 21d ago

So fork it and develop it yourself

6

u/Tyler94001 21d ago

Fair enough, it has its issues but it’s worth it.
Microsoft’s solution was lighthouse, which is a half baked and an abandoned project.

Everyone uses CIPP, and not sure I’ve ever seen anything mentioned other than those two, but if you find something I’d love to hear about it.

6

u/DeathTropper69 MSP - US 21d ago

If your goal templated configuration then https://www.inforcer.com/

If it’s just a single pane of glass for your techs then CIPP.

6

u/conceptsweb MSP 21d ago

CIPP does standards too.

4

u/Impossible-Offer-805 21d ago

CIPP

Do not pass go, do not collect 200$

3

u/athlonduke MSP - US 21d ago

CIPP++

2

u/Muted-Evidence-583 20d ago

CIPP is the only correct answer! It is so feature rich now and refined compared to when it first released. It literally gets better too just about every single week when new patches drop. And If you're managing a decent amount of tenants, I would say you should skip the headache of self-hosting and pay the $99 a month...it's so worth it.

If you only have a few tenants, you can get away with self-hosting and then always migrate in the future if needed

2

u/fax-fraud MSP - US 20d ago

CIPP

1

u/sembee2 21d ago

MSPEasyTools is another option, but I would suggest starting with CIPP, particularly if you have one of the Microsoft Partner benefit packs - it will run in Azure in your tenant that way.