Keyrus Delegate “Just Enough” Access for Microsoft 365

Keyrus Delegate “Just Enough” Access for Microsoft 365
SUMMARY
  • License governance: Delegated licenses into regional pools to eliminate conflicts and manual reallocations.
  • Privilege control: Created custom roles with “just enough” access, reducing security risks across 30 admins.
  • Workflow automation: Replaced manual scripts with 2,000+ automated tasks weekly, boosting efficiency and confidence.
Download case study

Arnaud Voisin is an IT Manager dedicated to enhancing the security and usability of Microsoft 365.
With over 10 years of experience at Keyrus, a prominent French management consulting firm often ranked among the best globally, he plays a vital role in the French IT team.

As Microsoft 365 serves as the backbone of their IT operations, Keyrus has begun to identify significant challenges within the system.

Challenge 1: A license free for all

Large Microsoft 365 users often face the issue of delegating license control; Arnaud was no exception. When regional teams ran out of licenses, they would take those allocated for other regions, necessitating constant oversight from Arnaud to reallocate them. Though he attempted to create AD security groups sync in Azure AD to segregate licenses by region, quota issues persisted.

Challenge 2: Privilege exposure & security fears

Keyrus was concerned about excessive admin rights. The team initially tested Microsoft’s native admin roles but found that they granted more privileges than necessary, exposing them to risks. Although they hoped Microsoft’s Administrative Units would solve the problem, the lack of dynamic rules at that time hindered automatic user addition.

Challenge 3: PowerShell pains

A PowerShell script created by a former IT employee was used for onboarding and offboarding users. Arnaud’s team needed to decipher, maintain, and update this third-party script over the years, proving both time-consuming and challenging. CoreView, with its integrated scripts and actions, enabled Keyrus to quickly create and deploy automated workflows for support teams.

Quote top graphic

“CoreView doesn’t just remove the risk of excessive privileges—it also simplifies day-to-day administration so I can delegate without worrying.”

— Arnaud Voisin, IT Manager for Keyrus

The solution: CoreView Delegation and Automation for M365

Keyrus looked at CoreView’s Delegation, Automation, and Reporting capabilities and saw how many of their pains could be resolved with just one platform.

With CoreView, Keyrus was quickly able to:

  • Delegate licenses into 16 regional pools
  • Create 12 virtual sub-tenants
  • Create roles with “just enough” privilege for their 30 admins
  • Replace existing PowerShell scripts
  • Automate 2000 workflows per week
  • Find over 100 unused licenses they were paying for

The outcome: Peace of mind & sleep at night

When we asked Arnaud about the impact CoreView had on him, he focused on his sense of relief:

“With CoreView, I know that when someone performs a sensitive Microsoft 365 task they will do it properly. CoreView doesn’t just remove the risk of excessive privileges, it also simplifies day-to-day administration so that I can delegate tasks without worrying that a less experienced team member may make a mistake.

Our team has a better sense of satisfaction because they can be more autonomous and productive.”

Arnaud estimates that M365 administration represents 50% of the helpdesk’s work, and for himself and the cloud engineers, that number goes up to 70%. Because of this, CoreView’s enhanced visibility and automation of Microsoft 365 have been transformational for Keyrus.

“I know when the management team requests any reports, whether it’s about how many licenses we are using, or any question about Microsoft 365, I will be able to find exactly what I need. If I don’t have the answer, I can ask David (Keyrus’ CoreView Customer Success Manager), or I can turn to CoreView’s exceptional support team. I feel completely on top of Microsoft 365 with CoreView.”

Get a personalized demo today

Created by M365 experts, for M365 experts.