Today we are announcing Microsoft 365 Lighthouse, a new experience that makes it easier for IT Partners to deliver managed services at scale to small and medium-sized customers.


Microsoft 365 Lighthouse will help you reduce your operational overhead by enabling you to onboard, monitor and manage your Microsoft 365 customers from one place. Moreover, you will be able to drive higher levels of standardization, automation, and auditing in how you work with customers.


Lighthouse is currently in private preview stage of development, and includes multi-tenant management capabilities for device compliance, threat management and user access management. To request early access to the public preview coming in first part of next year, register at


Let’s take a sneak peek at what’s coming.


Standardizing device compliance

First, Lighthouse will enable monitoring and management of device compliance across your customers from one place. With this capability, you can understand what policies are in place, review the status of devices across customers, and compare these across customers.

This helps you work toward standardization so you can manage your customer base efficiently at scale.



 Monitor and manage device compliance across customers from one place


Managing threats and antivirus protection

Second, Lighthouse includes threat management capabilities that let you see the protection status of Microsoft Defender Antivirus across all Windows 10 devices under management. With this, you will have one place to see which devices in your business are running Defender Antivirus, whether those are up to date, whether they have any active threats, and where an action – such as a reboot, required update, or overdue scan – is needed. You will also be able to view active threats in your environment, understand which users and devices are affected by them, which of these were blocked or quarantined, and where a review is needed.


This will help you reduce the operational burden of checking each PC one-by-one to verify all devices are protected and see if any needs action. 



Manage devices and active threats across customers from one place


Simplifying user access management

Third, Lighthouse simplifies and automates user access management. You can view a single list of all the users you manage across your customers, so you can quickly perform common but time-consuming tasks—reset a password, block access, assign a license, delegate access to a mailbox or OneDrive, change group membership—without having to log in and log out of individual customer tenants. Lighthouse will also provide insights into risky sign-ins and show conditional access policy settings across customers.


All of this is available in a way that is clearly auditable and that the actions performed are traceable.  


Other capabilities under development

Another capability we are currently exploring is helping you understand the adoption status of Microsoft 365 services across your customers, so you can help them get the most out of what they’ve paid for.


All of these new Lighthouse capabilities build upon the general multi-tenant capabilities being added to the Microsoft 365 admin center for customers and partners – including viewing service health and service requests across multiple tenants, and ability to quickly toggle between tenants.


Get involved in the development process

Lighthouse is currently in private preview stage of development – with IT technicians from several Managed Service Providers (MSPs) using it every day.



 Microsoft 365 Lighthouse homepage available in private preview


To see a demo of Microsoft 365 Lighthouse by our engineering leads and hear from a few IT partners previewing Lighthouse on where they’ve found most value in it, watch the following the video or join this Ignite on-demand session [OD256]:


You can register at to request early access to the public preview coming in the first part of next year and participate with us in the development of this exciting new set of capabilities.


Occasional Contributor

YES! I have been waiting for this as a partner dating all the way back to the early Windows Intune days back in 2012. With Azure Lighthouse, that has been really helpful but only helped with a portion of our customers' environments so this is going to be critical to provide true end-to-end monitoring and management across the Microsoft Cloud.

Occasional Visitor

I might be being thick but where does one find the TPID to enter on the form for early access?


@PaulBarton based on your and a few other comments received, we have removed the requirement to enter TPID on the early access form.

Note - This change doesn't impact anyone who has already summited the form previously so no need to re-submit. Hopefully, makes it easier for those who are still to submit.

Senior Member

As a CSP I would like to say - THANK YOU! :)


Happy Azure Stacking!

New Contributor

The death of the RMM can't come soon enough for security-conscious MSPs. Thank you, Microsoft!

Occasional Contributor

Intune for MSP will be very interesting (to me) the day we can upload/ create a Win32 package in our MSP tenant only, then distribute the application as easy as with Microsoft Store for Business applications across multiple customer tenants.

  • Updating the Win32 app on our MSP tenant? Sure, that updates package for customer tenants as well.
  • Only thing handled in the customer tenants are assignments and adding the product to their Intune in the first place.
Frequent Visitor

Hi there,


Are there any plans to allow on-premise Windows Servers with an Azure hybrid join to be visible inside lighthouse? It would be great to get AV management / visibility of Windows Servers in Lighthouse



Senior Member

This is a great!


An MSP/CSP Dynamics 365/Power Platform app next would be great too or integration with it.

Frequent Visitor

So this is feels like it’s going to be Microsoft Endpoint Manager for MSP’s. Great that if we sell Intune we can manage and get insights into devices centrally My concern is it doesn’t seem to have any focus on tenant level security. Is audit logging turned on, is MFA enabled and if other security defaults are tuned on per tenant. Productivity score, Secure score and Compliance score per tenant. Having these would help us make sure we maintain secure tenants. 

Senior Member

This will be a great tool for Partners, I am looking forward to being able to get behind it and onboard some customers.   The ability to control multiple tenancies from a single pane is a game changer around 365.   It will ease so much administration time.


Would love to see this being integrated with PIM...

Occasional Visitor

A welcomed announcement.

Frequent Visitor

I’m really excited about this. We just started deploying InTune to Business Premium customers and within a week it has saved countless hours managing updates and deploying applications. I’m really hoping my application to the preview is approved.


Looking forward to seeing how this develops.

Occasional Visitor

@Vivek Kumar We registered for the public preview but have many questions surrounding roadmap items for delegated access into M365 customers and running their security tools, like Office 365 DLP and MCAS. There are some ways to get there with Azure Lighthouse and Sentinel, but native hooks and proper delegation is paramount. Would love to chat more about where the solution falls down and what is coming in addition to the Intune pieces.



Thank you for the eagerness for Microsoft 365 Lighthouse, and the thoughtful comments here. We're making a note of the inputs here and will consider them during the development cycle. 


Due to overwhelming interest, we plan to invite partners to Microsoft 365 Lighthouse preview in phases. So if you responded to the early access survey, you're in line and someone from our team will reach out to you. 

Regular Visitor

This sounds similar to what Simeon Cloud is offering.....