Microsoft 365 Admin: Accounts, Licenses and Sharing Handled
Joiners set up, leavers closed out, licenses tidy, sharing under control.
The Microsoft 365 Admin is the Microsoft 365 admin assistant in the Ai1 platform by MyZone AI: from a plain request it sets up joiners, closes out leavers with their files handed over, reviews licenses and checks Teams and SharePoint sharing, using only the access each job needs.
A new person has their mailbox, license, Teams membership and the right SharePoint sites when they start.
Leavers closed out cleanly
Mail and OneDrive files are handed to the right person before the account is closed.
Licenses that match your staff
Unused and doubled-up licenses are found, so licenses go only to people who need them.
Sharing you can explain
You know which Teams and sites are open to outsiders and why.
Meet your agent
Get to know Nilufar
Nilufar double-locks every door and never forgets to switch off a leaver's access. She handles new accounts, departures, licences and sharing settings in Microsoft 365, using only the access each job needs.
AI agent. Fictional persona; not a real person.
Nilufar, the persona of the Microsoft 365 Admin
Name
Nilufar R.
Role
Microsoft 365 Administrator
Experience
9 years
Work history
IT support technician at a regional law firm Systems assistant at a university department
Personality
Least access, always, methodical every time
Based in
Dushanbe, Tajikistan
Why Nilufar has a personality
AI does better work as a specific expert, so the Microsoft 365 Admin works as Nilufar (Microsoft 365 Administrator, Dushanbe, Tajikistan). You can rename Nilufar or change the personality, experience and profile settings at any time.
Account, license, teams, groups and the right SharePoint sites
Leavers
Sign-in blocked, mail and OneDrive files handed over, then the license freed
Licenses
Unused and doubled-up licenses listed with suggested changes
Sharing
Which teams, sites and links reach people outside your company
Risky changes
Account removal, device wipes and company-wide settings wait for an approved person
Change log
Who asked for each change and how to undo it
Capabilities
What the Microsoft 365 Admin does for you
Sets up new staff
Creates the account, assigns the license and adds the person to the right teams, groups and sites.
Closes out leavers
Blocks sign-in, hands over mail and OneDrive files, then frees the license.
Reviews licenses
Lists licenses that are unused or assigned twice and suggests changes.
Checks Teams and SharePoint sharing
Shows which teams, sites and links reach people outside your company.
Reviews security settings
Looks at sign-in protection, multi-factor set-up and risky app consents, and explains what to change.
Logs every change
Each change is written down with who asked and how to undo it.
How the Microsoft 365 Admin differs from clicking through admin settings yourself
Clicking through admin settings yourself takes time and makes it easy to miss a license, a file handover or a shared site. The Microsoft 365 Admin takes a plain request, checks the person asking may make that change and lists exactly what will happen. Risky changes wait for an approved person. Every change uses only the access the job needs and is logged with how to undo it.
How this differs from the Google Workspace Admin: If your team runs on Google Workspace, use the Google Workspace Admin; the Microsoft 365 Admin does the same job for Microsoft 365, Teams and SharePoint.
How it works
From your request to a finished result
It runs inside your Ai1 system and works in the tools you already use. You ask, it works, it reports, and it stops for your OK where it matters.
Tap the diagram to enlarge it
Step 1: Make a request
Describe the change in your own words.
Step 2: Who is asking
It checks that the person asking may make that kind of change.
Step 3: See the impact
For a leaver, bulk change or sharing change, it lists exactly what will change.
You approve
Step 4: Approve risky changes
Removing an account, wiping a device or changing company-wide settings waits for a clear yes from an approved person.
Step 5: Change and log
It makes the change with the least access needed and records how to undo it.
When to use it
Hand these situations to the Microsoft 365 Admin
Illustrative photo. Set up a new starter's account and license, and remove a leaver's access.
If this is you…
…here's what it does
Three people join next month
Accounts, licenses, teams and sites ready for each of them.
A manager is leaving
Their mail and OneDrive files go to their replacement before the account closes.
Your license bill keeps growing
A list of unused and doubled-up licenses to review.
A SharePoint site was shared with a supplier
It shows who outside your company has access and the options to tighten it.
What you get
Ready accounts for new staff
Closed-out leavers with files handed over
A license review
A report of outside sharing in Teams and SharePoint
✕Answer everyday staff tech questionsHandled by: The IT Help Desk
✕Change your Microsoft planHandled by: Your own Microsoft account owner
Example monthly admin report
Example: monthly Microsoft 365 admin report
Example with a fictional company. Names, people and figures are invented to show the agent's output. Any resemblance to a real company or person is unintended.
What it was asked: Set up our three new starters, close down the two people leaving, and tell me where our client files are shared more widely than they should be.
Example report
October changes at a glanceDeparture checklist: senior bookkeeper, last day Fri 30 OctTeams and SharePoint sharing reviewSecurity settings, licences and the access used
What it found: 3 findings, with the numbers
Three new starters have accounts ready for their first day and both departures are handled in a safe order, leaving 48 of 50 licences assigned and 2 spare.
Of 23 items shared outside the firm, 11 need tightening, including 6 open links to the tax returns site; every change waits for the managing partner's approval.
45 of 48 people use two-step sign-in, and one rule forwarding mail to a personal address was found and flagged for removal.
This is an illustrative example of the monthly report Microsoft 365 Admin is being built to produce: joiners and leavers, a departure checklist, a sharing review, security settings and licences, with the access used for each job. It was written by hand from the agent's design for an invented accounting firm, with staff shown only as roles and invented figures. No real systems or people were involved, and no account, setting or sharing link was changed. Run date: .
Microsoft 365, Microsoft Teams, SharePoint and OneDrive are trademarks of Microsoft; Google Workspace is a trademark of Google. MyZone is not affiliated with or endorsed by either.
Want a monthly admin report like this for your own staff accounts? Book a Microsoft 365 walkthrough.
The Security Agent reviews security questions beyond the office suite.
Common questions
Frequently asked questions about the Microsoft 365 Admin
How do I stop files in Teams and SharePoint being shared with outsiders?
External sharing is set at more than one level, so a site can be more open than you expect. The Microsoft 365 Admin explains where your current sharing is set, shows the options and changes nothing until an approved person says yes.
How should Microsoft 365 offboarding work when someone leaves?
Sign-in should be blocked, mail and OneDrive files handed to the right person, and the license freed once the handover is done. The Microsoft 365 Admin lists exactly what will change, waits for an approved person to say yes before an account is removed and logs each step with how to undo it.
What does a Microsoft 365 admin do?
A Microsoft 365 admin manages user accounts, licenses, Teams, SharePoint sharing and security settings. The Microsoft 365 Admin handles these from a plain request, with the least access each job needs. Microsoft 365, Microsoft Teams, SharePoint and OneDrive are trademarks of Microsoft Corporation. Microsoft 365 Admin is not affiliated with or endorsed by Microsoft.
Does it need full admin rights?
No. It uses only the access each job needs. Changes that need top-level rights are carried out by an approved person.
What happens to a leaver's files?
Mail and OneDrive files are handed to the person you choose before the account is closed.
We use Google Workspace. Is this the right agent?
No. The Google Workspace Admin does the same job for Google Workspace.
Is the Microsoft 365 Admin available now?
Not yet. Your Ai1 team will tell you when the Microsoft 365 Admin is ready for your account. You can talk to us today about how your Microsoft 365 is set up.
About Ai1
How much does Ai1 cost?
Two paths, one platform. Build it yourself on a developer plan, or let our team run your AI operations for you. Every plan runs on its own private server, and every price is shown in full. See Ai1 pricing →
Do I get just the Microsoft 365 Admin, or the whole platform?
The whole platform. The Microsoft 365 Admin is not sold on its own: every Ai1 agent, including this one, is included on Developer Pro and every Fully Managed option, with no per-agent charge. Developer Core includes the development agents. Compare plans →
Operations
Operations
Operations
Operations
Operations