Insight/Delegated access (CSP program)

[DrCheese]

Hi folks,

 

Our MS licensing provider (PCM) was bought out by Insight recently - In the past I've just bought our MS licenses via OVS and activated them myself on the 365 portal each year.

 

I've gone to buy some Minecraft edu licenses for a club we're starting up & Insight are asking us to sign a "Microsoft Cloud solution agreement" before this is possible - Problem is this talks about giving them delegated access to our 365 so they can access our licensing (Including disabling for non payment which I feel really uncomfortable this as I've never had to before - It also talks about using them as the first point of support which (Whist appreciated) we don't really need.

 

Has anyone else had to sign off one of these recently?

Edited February 3, 2020 by DrCheese

[john]

https://docs.microsoft.com/en-us/partner-center/confirm-consent < gives a bit more info about it, should have been being done for over a year and a bit now and will probably be related to how Insight and Microsoft transact for Cloud Services.

[DrCheese]

Thanks - The first page of the CSP program mentions this tho..

 

"The Cloud Solution Provider program (CSP) helps you go beyond reselling licenses to being more involved in your customer's business" - Then later refers to granting them global admin permissions on the 365 which I really don't want to do.

https://docs.microsoft.com/en-us/partner-center/request-a-relationship-with-a-customer

 

 

Am the only one who's concerned about this? I trust my reseller but I dont' feel I should have to give them such high access? (or any, really)

Edited February 3, 2020 by DrCheese

[robk]

I signed it and then revoked the global admin access immediately. Seemed to work.

[john]

I signed it and then revoked the global admin access immediately. Seemed to work.

 

Must admit an agreement I took over from before I started had the MSP with access, I removed that once we had an account with full access as they removed the full full from all our accounts helpfully....

 

I think you can refuse, I know (admittedly I am in the world of corporate) we don't have our vendor listed under the partner as our Legal team would kick off so suspect we have refused that.

[DrCheese]

They're saying it's because I can only buy Minecraft Edu under the CSP program, which is disappointing (All this for a lunchtime club!!) & that I can revoke access after - But it's more the legal contract that'll be created that worries me, as it states they take on our support.

[john]

They're saying it's because I can only buy Minecraft Edu under the CSP program, which is disappointing (All this for a lunchtime club!!) & that I can revoke access after - But it's more the legal contract that'll be created that worries me, as it states they take on our support.

 

Being honest that is probably better support than you get from the awful MS Potatoes on 1st and 2nd line at O365 support

[DrCheese]

I've pondered on this over the past week but ultimately I don't feel comfortable with it - I've read horror stories involving resellers being targeted and access stripped. Nothing about the program gives me any real confidence

https://krebsonsecurity.com/2019/06/breach-at-cloud-solution-provider-pcm-inc/

 

I'll see if I can do it via another license type but I'm not hopeful.