All insights

Who owns your Microsoft 365 tenant?

2 min readBy Brendon Whiting, Founder · 18 June 2026

Your business should, and it is worth confirming rather than assuming. The tenant should be registered to your organisation, your domain should be registered in your name, and you should hold a global administrator account you control. Some providers set clients up inside arrangements that make leaving slow, and the time to discover that is not during a changeover.

This rarely comes from bad intent. In the early days of a relationship a provider registers the domain because it is faster than waiting for someone to find a credit card, and creates the tenant under their own management because that is the efficient path. Then years pass and nobody revisits it. The trouble only appears at the one moment you need control most: a changeover, a dispute, or a provider who has stopped answering the phone.

Three things to verify, and none takes long. The tenant is registered to your organisation, not held inside a partner-managed arrangement you cannot see. Your domain is registered in your business name with contact details you control, since the domain is your email and your website and losing it is losing your identity. And you hold a global administrator account, protected with multi-factor authentication, with credentials stored where your provider cannot reach them. That last one is a break-glass account, not a daily login.

None of this implies distrust of a good provider, and a good provider will hand it over without a pause, because it costs them nothing and it is plainly right. That is exactly what makes the request such a useful test. We set clients up owning their own tenant and domain with administrative access documented, on the view that a relationship should continue because it works rather than because leaving is difficult. If you cannot answer these three questions today, that is this week's email to your provider: 1800 456 567.

Make sure the tenant is in your name

We set clients up as the owners of their own tenant and domain, with administrative access documented, so leaving us stays possible.

Frequently asked questions

Ask your provider for global administrator access and see what happens, which is the fastest diagnostic available. Then confirm the domain registration is in your business name with contact details you control. If either request meets resistance or delay, you have found something worth resolving now rather than during a changeover.

Yes, one break-glass account owned by the business, protected with multi-factor authentication and its credentials stored somewhere the provider cannot reach. It is not for daily use. It exists so that a dispute, an unreachable provider or a provider going under cannot separate you from your own systems.

It is common, often innocent, and always worth fixing. Providers frequently register domains for clients as a convenience in the early days. Ownership should still be transferred to your business, because a domain is your identity: your email, your website and your ability to move anywhere else all depend on controlling it.

Questions? Let's talk.

Call 1800 456 567 or fill out the form.

  • 30-minute discovery — no jargon, no pressure
  • Plain-English Essential Eight Cyber Security Scorecard
  • A clear plan tailored to your business

Prefer to talk?

Call 1800 456 567

Powered by Calendly — your data is handled securely.

Our office · Level 2, 25 Grenfell Street, Adelaide

By submitting, you agree to our terms and privacy policy. No spam — ever.