| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| admin | Create Dns Records At Aws | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/dns/create-dns-records-at-aws.md | f1.keywords: Previously updated : 02/18/2020 Last updated : 08/12/2024 audience: Admin Before you use your domain with Microsoft, we have to make sure that you own it. 1. To get started, go to your domains page at AWS by using [this link](https://console.aws.amazon.com/route53/home). You'll be prompted to log in first. -1. On the landing page, under **Domains**, select **Registered domains**. +2. On the landing page, under **Domains**, select **Registered domains**. -1. Under **Domain Name**, select the domain you want to set up in Microsoft 365. +3. Under **Domain Name**, select the domain you want to set up in Microsoft 365. **Note**: If you haven't created a hosted zone for your domain, select **Create hosted zone** and complete the steps before moving to the next step. :::image type="content" source="../../media/dns-aws/aws-domains-1.png" alt-text="Screenshot of Registered Domains where you select the Domain Name for the domain verification TXT record."::: -1. Select **Manage DNS**. +4. Select **Hosted Zones** in the top left navigation panel. :::image type="content" source="../../media/dns-aws/aws-domains-2.png" alt-text="Select Manage DNS from the drop-down list."::: -1. Under **Domain name**, select the domain name for the hosted zone version of the domain you want to verify. +5. Under **Hosted zone name**, select the domain name for the hosted zone version of the domain you want to verify. :::image type="content" source="../../media/dns-aws/aws-domains-3.png" alt-text="Screenshot of Hosted zones where you select the Domain name for the domain verification TXT record."::: -1. Select **Create record**. +6. Select **Create record**. :::image type="content" source="../../media/dns-aws/aws-domains-create-record.png" alt-text="Screenshot of where you select Create record to add a domain verification TXT record."::: -1. In the boxes for the new record, type or copy and paste the values from the following table. +7. In the boxes for the new record, type or copy and paste the values from the following table. (Choose the **Type** and **Routing policy** values from the drop-down lists.) Before you use your domain with Microsoft, we have to make sure that you own it. |:--|:--|:--|:--|:--| |(Leave this field empty.)|TXT - Used to verify email senders|MS=ms*XXXXXXXX* <br/> **Note:** This is an example. Use your specific **Destination or Points to Address** value here, from the table in Microsoft 365. [How do I find this?](../get-help-with-domains/information-for-dns-records.md)|300|Simple| -1. Select **Create records**. +8. Select **Create records**. :::image type="content" source="../../media/dns-aws/aws-domains-txt-create-records.png" alt-text="Screenshot of where you select Create records to add a domain verification TXT record."::: Wait a few minutes before you continue, so that the record you just created can update across the Internet. -Now that you've added the record at your domain registrar's site, you'll go back to Microsoft and request a search for the record. When Microsoft finds the correct TXT record, your domain is verified. +Now that you've added the record at your domain registrar's site, you'll go back to Microsoft and request a search for the record. When Microsoft finds the correct TXT record, your domain is **verified**. To verify the record in Microsoft 365: To verify the record in Microsoft 365: 1. On the Domains page, select the domain that you're verifying, and select **Start setup**. - :::image type="content" source="../../media/dns-IONOS/IONOS-DomainConnects-2.png" alt-text="Select Start setup."::: + :::image type="content" source="../../media/dns-aws/aws-domains-start-setup.png" alt-text="Select Start setup."::: 1. Select **Continue**. To verify the record in Microsoft 365: :::image type="content" source="../../media/dns-aws/aws-domains-1.png" alt-text="Screenshot of Registered Domains where you select the Domain Name for the MX record."::: -1. Select **Manage DNS**. +1. Select **Hosted Zones** in the top left navigation panel. :::image type="content" source="../../media/dns-aws/aws-domains-2.png" alt-text="Select Manage DNS from the drop-down list."::: -1. Under **Domain name**, select the domain name for the hosted zone version of the domain you want to verify. +1. Under **Hosted zone name**, select the domain name for the hosted zone version of the domain you want to verify. :::image type="content" source="../../media/dns-aws/aws-domains-3.png" alt-text="Select the domain name for the hosted zone version of the domain."::: |
| admin | Add Google Domain | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/moveto-microsoft-365/add-google-domain.md | f1.keywords: Previously updated : 01/06/2021 Last updated : 08/29/2024 audience: Admin Add your Google Workspace domain to Microsoft 365 for business so you can keep u 1. In the Microsoft 365 admin center, in the left nav, select **Show all** > **Settings** > <a href="https://go.microsoft.com/fwlink/p/?linkid=834818" target="_blank">**Domains**</a>. 1. Choose **Add domain**, enter your domain name then select **Use this domain**. 1. Choose, **Add a TXT record to the domains DNS records**, select **Continue**, and copy the TXT value. -1. Go back to the [Google Admin Console](https://admin.google.com), choose **Domains**, **Manage domains**, **View Details**, **Manage domain**, **DNS**, and then scroll down to **Custom resource records**. +1. Go back to the **_formerly Google Admin_**, now [Squarespace Console](https://domains.squarespace.com), choose **Domains**, **Manage domains**, **View Details**, **Manage domain**, **DNS**, and then scroll down to **Custom resource records**. 1. Open the record type drop-down, choose **TXT**, paste the TXT value you copied then select **Add**. The update usually takes effect within a few minutes but may take up to 48 hours. |
| business-premium | M365bp Mdb Maintain Environment | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/business-premium/m365bp-mdb-maintain-environment.md | The following table summarizes remediation actions that are available for device ## General admin tasks -Maintaining your environment includes managing user accounts, managing devices, and keeping things up to date and working correctly. Admin tasks are typically performed by global admins and tenant admins. [Learn more about admin roles](../admin/add-users/about-admin-roles.md). +Maintaining your environment includes managing user accounts, managing devices, and keeping things up to date and working correctly. Admin tasks are typically performed by global administrators and tenant administrators. [Learn more about admin roles](../admin/add-users/about-admin-roles.md). > [!IMPORTANT] > Microsoft recommends that you use roles with the fewest permissions. Using lower permissioned accounts helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role. |
| business-premium | M365bp Protect Admin Accounts | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/business-premium/m365bp-protect-admin-accounts.md | Because admin accounts come with elevated privileges, they're valuable targets f - [How to protect admin accounts](#protect-admin-accounts). - [Additional recommendations](#additional-recommendations) and your [Next step](#next-step). -When you sign up for Microsoft 365 and enter your information, you automatically become the Global Administrator (also referred to as the Global admin). A Global admin has the ultimate control of user accounts and all the other settings in the Microsoft admin center (<https://admin.microsoft.com>), but there are many different kinds of admin accounts with varying degrees of access. See [about admin roles](/office365/admin/add-users/about-admin-roles) for information about the different access levels for each kind of admin role. +When you sign up for Microsoft 365 and enter your information, you automatically become the Global Administrator (also referred to as the global admin). A Global Administrator has the ultimate control of user accounts and all the other settings in the Microsoft admin center (<https://admin.microsoft.com>), but there are many different kinds of admin accounts with varying degrees of access. See [about admin roles](/office365/admin/add-users/about-admin-roles) for information about the different access levels for each kind of admin role. ## Create other admin accounts Use admin accounts only for Microsoft 365 administration. Admins should have a separate user account for their regular use of Microsoft 365 Apps, and only use their administrative account when necessary to manage accounts and devices, and while working on other admin functions. It's also a good idea to remove the Microsoft 365 license from your admin accounts so you don't have to pay for extra licenses. -You'll want to set up at least one other Global admin account to give admin access to another trusted employee. You can also create separate admin accounts for user management (this role is called **User management administrator**). For more information, see [about admin roles](/office365/admin/add-users/about-admin-roles). +You'll want to set up at least one other Global Administrator account to give administrator access to another trusted employee. You can also create separate admin accounts for user management (this role is called **User management administrator**). For more information, see [about admin roles](/office365/admin/add-users/about-admin-roles). > [!IMPORTANT]-> Although we recommend setting up a set of admin accounts, you'll want to limit the number of global admins for your organization. In addition, we recommend adhering to the concept of least-privilege access, which means you grant access to only the data and operations needed to perform their jobs. [Learn more about the principle of least privilege](/azure/active-directory/develop/secure-least-privileged-access). +> Although we recommend setting up a set of admin accounts, you'll want to limit the number of Global Administrators for your organization. In addition, we recommend adhering to the concept of least-privilege access, which means you grant access to only the data and operations needed to perform their jobs. [Learn more about the principle of least privilege](/azure/active-directory/develop/secure-least-privileged-access). To create more admin accounts: |
| commerce | View Your Bill Or Invoice | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/billing-and-payments/view-your-bill-or-invoice.md | You must be at least a Billing Administrator to do the steps described in this a 1. Go to the Microsoft 365 admin center. - If you're using the **Simplified view**, select **Billing**, then select **View invoices**.- - If you're using the **Dashboard view**, go to the **Billing** \> <a href="https://go.microsoft.com/fwlink/p/?linkid=2102895" target="_blank">Bills & payments</a> page. -2. Select an invoice from the list to view the details online. If you donΓÇÖt see any invoices, change the date range. -3. To download the .PDF version of your invoice, select **Download PDF**. + - If you're using the **Dashboard view**, go to the **Billing** > <a href="https://go.microsoft.com/fwlink/p/?linkid=2102895" target="_blank">Bills & payments</a> page. +2. If you have more than one billing account, select **Change billing account** to view invoices associated with each billing account. +3. Select an invoice from the list to view the details online. If you donΓÇÖt see any invoices, change the date range. +4. To download the .PDF version of your invoice, select **Download PDF**. > [!NOTE] > The online version of your invoice looks different from the .PDF version that you download. |
| commerce | Billing Experience Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/billing-experience-overview.md | The following list describes other changes weΓÇÖve made to the billing experienc - **More subscription lengths**—Depending on the product or service you buy, you can choose a subscription length of one month, one year, or three years. - **New cancellation policy**—You can now only cancel and receive a prorated credit or refund if you cancel within seven days after the start or renewal of your subscription. If you cancel during this limited time window, the prorated amount is either credited towards your next invoice or returned to you in the next billing cycle. For more information, see [Cancel your Microsoft business subscription](subscriptions/cancel-your-subscription.md). - **New scheduling for license changes**—You can now choose to increase or decrease the number of licenses you have for a subscription on the next subscription renewal date.-- **New billing account selector**—If you have more than one billing account, you can select **Change billing account** on the **Purchase services** page to use a different billing account to buy new products and services.+- **New billing account selector**—If you have more than one billing account, you can select **Change billing account** on the **Purchase services** page to use a different billing account to buy new products and services. On the **Invoices** page, you can select **Change billing account** to view invoices associated with different billing accounts. ## Related articles |
| commerce | Manage Billing Accounts | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/manage-billing-accounts.md | The <a href="https://go.microsoft.com/fwlink/p/?linkid=2084771" target="_blank"> ## View my billing accounts 1. Go to the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>.-2. Select the **Navigation menu**, then select **Billing** > <a href="https://go.microsoft.com/fwlink/p/?linkid=2084771" target="_blank">Billing accounts</a>. -3. The **Billing accounts** page lists the billing accounts associated with your organization. -4. The **Billing account type** column indicates what type of agreement you signed with Microsoft for each billing account. Select a billing account name to view its details page. +1. Select the **Navigation menu**, then select **Billing** > <a href="https://go.microsoft.com/fwlink/p/?linkid=2084771" target="_blank">Billing accounts</a>. +1. The **Billing accounts** page lists the billing accounts associated with your organization. +1. The **Billing account type** column indicates what type of agreement you signed with Microsoft for each billing account. Select a billing account name to view its details page. ++## Select a default billing account ++If you have more than one billing account, you can use the billing account selector to set a default billing account. When you set a default billing account, we use that account as the first choice for all your billing activities. You can change your default billing account at any time. ++1. Go to the [Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=2024339""). +1. Select the **Navigation menu**, then select **Billing** > [Bills & payments](https://go.microsoft.com/fwlink/p/?linkid=2102895). +1. On the **Invoices** tab, select **Change billing account**. +1. Select a billing account from the list, then select **Set as default**. ## Understand the billing account details page You can view the roles assigned to users for a billing account and related billi 1. Go to the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">admin center</a> 2. Select the **Navigation menu**, then select **Billing** > **Billing accounts**. 3. On the <a href="https://go.microsoft.com/fwlink/p/?linkid=2084771" target="_blank">Billing accounts</a> page, select a billing account.-4. Under **Billing account roles**, select **View related role assignments**. +1. Under **Billing account roles**, select **View related role assignments**. To export the information shown in the **Related billing role assignments** pane, select **Export to CSV**. |
| lighthouse | M365 Lighthouse Get Help And Support | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/lighthouse/m365-lighthouse-get-help-and-support.md | If you're experiencing an issue that isn't listed in any of these resources, the 2. In the **Help** pane, select the **Help + support** button. This opens the **How can we help?** pane. > [!NOTE]- > If the **How can we help?** pane doesn't open, you'll need to reach out to someone in your partner tenant who has appropriate permissions and ask them to help. + > If the **How can we help?** pane doesn't open, you'll need to reach out to an admin in your partner tenant and ask them to help. 3. In the **How can we help?** pane, enter a description of your issue, and then press **Enter**. We recommend including the full product name *Microsoft 365 Lighthouse* in your description to ensure the search results include relevant help articles. |
| lighthouse | M365 Lighthouse Sign Up | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/lighthouse/m365-lighthouse-sign-up.md | Microsoft 365 Lighthouse is deployed in the partner tenant only—not in the > [!NOTE] > If you see the message, "You must be an indirect reseller or direct-bill partner to use this service," see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md) for eligibility details. -2. If you see the message, "You need to sign up for Microsoft 365 Lighthouse in the Microsoft 365 admin center," then follow these steps: +2. If you see the message, "You need to sign up for Microsoft 365 Lighthouse in the Microsoft 365 admin center," reach out to an admin in your partner tenant and ask them to follow these steps: 1. Go to the Microsoft 365 admin center at <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">https://admin.microsoft.com</a> and sign in using your partner tenant credentials. - 2. Go to **Billing** > **Purchase services** > **Microsoft 365**. + 2. In the left navigation pane, select **Billing** > **Purchase services** > **Microsoft 365**. > [!NOTE] > Instead of **Billing**, some partners may need to go to **Marketplace** > **All products**, and then search for **Microsoft 365 Lighthouse**. Microsoft 365 Lighthouse is deployed in the partner tenant only—not in the 5. If you aren't redirected to the Lighthouse portal, go to <a href="https://go.microsoft.com/fwlink/p/?linkid=2168110" target="_blank">https://lighthouse.microsoft.com</a>. +3. If you see the message, "Microsoft 365 Lighthouse was removed for your organization," it means your partner tenant settings need to be modified to allow the use of Lighthouse. Reach out to an admin in your partner tenant and ask them to follow these steps: ++ 1. Go to the Microsoft 365 admin center at <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">https://admin.microsoft.com</a> and sign in using your partner tenant credentials. + + 2. In the left navigation pane, select **Settings** > **Org settings**. ++ 3. On the **Services** tab, select **Microsoft 365 Lighthouse** from the list of services, and then select the option to allow the use of Microsoft 365 Lighthouse customer management experiences in your tenant. ++ 4. Select **Save**. + > [!NOTE] > After you complete sign-up, it can take up to 48 hours for customer data to appear in Lighthouse. |
| lighthouse | M365 Lighthouse Troubleshoot | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/lighthouse/m365-lighthouse-troubleshoot.md | This article describes error messages and problems that you might encounter whil **Resolution:** For a complete list of qualifications and requirements, see [Requirements for Microsoft 365 Lighthouse](m365-lighthouse-requirements.md). If you qualify to access Lighthouse and believe you received this message in error, contact Support. For more information, see [Get help and support for Microsoft 365 Lighthouse](m365-lighthouse-get-help-and-support.md). +### Message when signing in to Lighthouse: "Microsoft 365 Lighthouse was removed for your organization" ++**Cause:** Microsoft 365 Lighthouse is disabled in your partner tenant. ++**Resolution:** To allow the use of Microsoft 365 Lighthouse, reach out to an admin in your partner tenant and ask them to follow these steps: ++1. Go to the Microsoft 365 admin center at <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">https://admin.microsoft.com</a> and sign in using your partner tenant credentials. + +2. In the left navigation pane, select **Settings** > **Org settings**. ++3. On the **Services** tab, select **Microsoft 365 Lighthouse** from the list of services, and then select the option to allow the use of Microsoft 365 Lighthouse customer management experiences in your tenant. ++4. Select **Save**. + ### Message when signing in to Lighthouse: "Accept the Partner Amendment" **Cause:** You attempted to access Lighthouse before a Global Administrator in the partner tenant has signed the partner amendment. If you confirmed that your customer tenant meets the onboarding criteria and the **Cause:** You don't belong to the correct security group in Microsoft Entra ID, or you haven't been assigned the correct role in Partner Center to be able to access Lighthouse. -**Resolution:** Make sure that an admin from your partner tenant with the appropriate permissions has assigned you to the correct GDAP security group in Microsoft Entra ID and assigned you the correct role in Partner Center. Also, keep in mind that some actions in Lighthouse require you to be a Global Administrator. To learn more about the GDAP roles and what each role can do, see [Overview of permissions in Microsoft 365 Lighthouse](m365-lighthouse-overview-of-permissions.md). For a detailed description of all Microsoft Entra built-in roles and permissions for GDAP, see [Microsoft Entra built-in roles](/azure/active-directory/roles/permissions-reference). +**Resolution:** Make sure that an admin from your partner tenant assigned you to the correct GDAP security group in Microsoft Entra ID and assigned you the correct role in Partner Center. Also, keep in mind that some actions in Lighthouse require you to be a Global Administrator. To learn more about the GDAP roles and what each role can do, see [Overview of permissions in Microsoft 365 Lighthouse](m365-lighthouse-overview-of-permissions.md). For a detailed description of all Microsoft Entra built-in roles and permissions for GDAP, see [Microsoft Entra built-in roles](/azure/active-directory/roles/permissions-reference). For customers with DAP relationships, the partner admin will need to assign you to either the Admin agent or Helpdesk agent role in Partner Center. For a detailed description of all Partner Center roles and permissions, see [Assign roles and permissions to users](/partner-center/permissions-overview). For customers with DAP relationships, the partner admin will need to assign you **Cause:** You have limited GDAP access based on the roles assigned to the Microsoft Entra security group that you're in. -**Resolution:** Make sure that an admin from your partner tenant with the appropriate permissions has assigned you to the correct GDAP security group in Microsoft Entra ID. Also, keep in mind that some actions in Lighthouse require you to be a Global admin. To learn more about the GDAP roles and what each role can do, see [Overview of permissions in Microsoft 365 Lighthouse](m365-lighthouse-overview-of-permissions.md). For a detailed description of all Microsoft Entra built-in roles and permissions for GDAP, see [Microsoft Entra built-in roles](/azure/active-directory/roles/permissions-reference). +**Resolution:** Make sure that an admin from your partner tenant assigned you to the correct GDAP security group in Microsoft Entra ID. Also, keep in mind that some actions in Lighthouse require you to be a Global admin. To learn more about the GDAP roles and what each role can do, see [Overview of permissions in Microsoft 365 Lighthouse](m365-lighthouse-overview-of-permissions.md). For a detailed description of all Microsoft Entra built-in roles and permissions for GDAP, see [Microsoft Entra built-in roles](/azure/active-directory/roles/permissions-reference). ## GDAP setup and management You should also make sure Conditional Access policies configured in the customer **Cause:** The **User type** field in your Microsoft Entra ID account is either blank or set to *Guest*. -**Resolution:** Make sure that an admin from your partner tenant with the appropriate permissions has set **User type** to *Member* in your Microsoft Entra ID account. +**Resolution:** Make sure that an admin from your partner tenant has set **User type** to *Member* in your Microsoft Entra ID account. ## Customer tenant management |