Answers and glossary
Checked October 27, 2026 by Accred Consulting
Each answer opens with a direct reply in a few sentences, then the detail, the Microsoft sources it relies on, and the date it was checked. The glossary defines the terms used across the Accred apps.
Questions
- What is GDAP (granular delegated admin privileges)?GDAP gives a Microsoft partner least-privileged, time-bound admin roles in a customer tenant for up to two years. How it works and how it replaced DAP.
- When can you reduce Microsoft 365 licenses under NCE?Under Microsoft’s new commerce experience you can cancel or reduce licenses only in the first 7 days (168 hours) of a term. What that means for license savings.
- What is configuration drift in Microsoft 365?Configuration drift is when a Microsoft 365 tenant’s settings move away from the baseline you intended. Common causes, examples, and how to detect it.
- What is an access review in Microsoft Entra ID?An access review checks that people still need their group, app, or role access, and removes what they do not. How it works and which licenses it needs.
- What is an AI governance readiness score?How Accred Assess scores AI governance readiness: implemented controls count fully, in-progress half, and not-applicable ones are left out. With an example.
- Does Microsoft back up Microsoft 365 data? Retention vs backupMicrosoft 365 keeps deleted items for 14 to 93 days and sells a separate backup product. Recovery windows, retention vs backup, and when you need a backup.
- What is a migration wave in a tenant-to-tenant migration?A migration wave is a scheduled group of users and their mailboxes, OneDrive, and sites moved together. How to plan waves, and Microsoft’s native limits.
- How do you move a custom domain from one Microsoft 365 tenant to another?A domain is verified in only one tenant, so it moves at cutover: clear it from the source, verify it in the destination, set addresses, then switch MX.
- How do you turn SharePoint oversharing reports into a Copilot readiness plan?Run the SharePoint data access governance reports, import the export into Accred Assess, and work its oversharing findings into your Copilot readiness plan.
- How do you check a Microsoft 365 tenant against a Conditional Access baseline?Accred Manage rates six Conditional Access controls as met, partial, not evaluated, or a gap. What each result means, and a short how-to for closing a gap.
- How do you find unused Teams Phone licenses and phone numbers?Compare who holds a Teams Phone license with who makes outside calls, list numbers by assignment, and clean up without losing a number you still need.
- How do you track Microsoft Secure Score and catch a drop?Accred Manage shows Secure Score, its daily trend, and the actions worth the most points, and flags a drop of 5 points or more. How to read it and act on it.
Glossary
- Access review
- A recurring check that people still need their group, app, or role access, followed by removing what they do not.
- AI governance readiness
- How far an organization has implemented the controls it needs before rolling out AI tools. Advisory, not certification.
- Baseline
- The settings a Microsoft 365 tenant is supposed to have, written down so drift can be measured.
- Client
- In Accred, a customer or customer entity that an organization serves through Consult or Migrate. Not the same as a tenant.
- Conditional Access
- Microsoft Entra rules that decide how people sign in, such as requiring MFA or blocking legacy sign-in. Needs Entra ID P1.
- Configuration drift
- The gap between a tenant’s baseline and its live settings.
- Cutover
- The point in a migration when users switch to the destination tenant and mail starts flowing there.
- GDAP
- Granular delegated admin privileges: least-privileged, time-bound admin roles a customer grants a Microsoft partner.
- Migration wave
- A scheduled batch of users and their data that is prechecked, migrated, and validated together.
- New commerce experience (NCE)
- Microsoft’s licensing model for partner-sold subscriptions, where cancellations and reductions are allowed only in the first seven days of a term.
- Organization
- In Accred, the customer account and security boundary that members sign in to through Hub.
- Point-in-time restore
- Restoring an item as it existed at a chosen date and time from backup history.
- Precheck
- A read-only check before a migration run that finds problems without writing to either tenant.
- Resource account
- The account behind a Teams auto attendant or call queue. It needs a Teams Phone Resource Account license.
- Restricted Content Discovery
- A SharePoint setting that keeps chosen sites out of organization-wide search and Copilot answers without changing permissions.
- Seat
- In Accred, a paid assignment that lets one member use Consult. Hub, Assess, Manage, Connect, and Migrate need none.
- Secure Score
- Microsoft’s measure of a tenant’s security posture: the percentage of points earned from recommended actions.
- Tenant
- A Microsoft 365 environment with its own directory and data. In Accred it is a connected technical resource, not the customer account.
- Tenant-to-tenant migration
- Moving users, mailboxes, files, sites, and teams from one Microsoft 365 tenant to another, often after a merger or divestiture.
Create your organization, then turn on the apps you need.
Hub, the Connect and Aware previews, License, and Fleet cost nothing today. Manage is free for every role except Viewer, Assess is free to start, and Protect and Devices start with a 30-day free trial for up to 10 protected users or 50 devices.