Microsoft 365 support for SMEs: what does a partner handle and what does the company?

In short: For most SMEs Microsoft 365 is the foundation of work: email, files, Teams and Office. Microsoft runs the platform; accounts, security settings, devices and licences remain the company’s responsibility. Microsoft 365 support means a partner handles these: user accounts, two-factor authentication, device management, licence sizing and help when something fails. The company keeps the decisions and a contact person.

Microsoft 365 is so ordinary that managing it is easy to overlook. The service works, email flows and files are in the cloud. Problems surface only when an employee leaves and the account stays open, when someone clicks a phishing message or when licences are paid for people who are no longer with the company. This article walks through what needs looking after in a Microsoft 365 environment and who owns the work.

What does Microsoft handle, and what does it not?

Microsoft is responsible for the service being available, updated and protected at the service level. The mail server is no longer in the company’s cupboard, and nobody has to install Office updates.

Accounts, permissions, settings, devices and data remain the customer’s responsibility. Microsoft describes this as a shared responsibility model: the platform belongs to the provider, the content and its protection belong to the customer. In practice this means a wrongly set sharing link, a weak password or an account without two-factor authentication is the company’s problem, not Microsoft’s.

What needs looking after in a Microsoft 365 environment?

There are five areas to look after.

1. User lifecycle. A new employee needs an account, a mailbox, access to the right teams and files, and a device that is ready on day one. When employment ends, the account is closed, the mailbox and files are handed over as agreed and the licence is released. This is routine, but routine is exactly what gets skipped when nobody has been given responsibility for it.
2. Basic security settings. Two-factor authentication for every user, administrator accounts kept separate from everyday use, sharing settings so that files don’t accidentally go out to the whole world, and spam and phishing filtering in order. These are not in their best position by default; they have to be set.
3. Devices. When computers and phones are under device management, it is known which devices can reach company data, they receive updates and a lost device can be wiped. This applies to Windows computers, Macs and phones alike.
4. Licences. There are several Microsoft 365 for business plans, and they differ in which security and management features they include. The wrong choice shows up either as unnecessary cost or as missing protection. Licences also need reviewing regularly so that they are not paid for accounts nobody uses.
5. The data itself. Microsoft keeps the service running, but that does not replace the company’s own judgement about how long deleted data is retained and whether a separate backup is needed. Knowing where the data is located belongs to the same area, and we have written about that separately.

What does Microsoft 365 support from a partner mean?

The partner takes over the five areas above. Users are added and removed on request in an agreed way, and a new employee’s device is ready on their start date. Security settings are configured and monitored, and anomalies raise alerts. Devices are under management. Licences are sized and reviewed on request or when things change, and proposed changes come with reasons. When a user has a problem, they get help from a person who knows the environment.

Support is not only fixing faults. A large part of the work is making sure things are in order before anyone notices they are missing.

What stays with the company?

Three things.

1. Decisions. Who gets which permissions, how files may be shared externally and which licence level is used. The partner prepares and recommends, the company decides.
2. A contact person. One individual who says when someone starts or leaves and approves changes.
3. Ownership. Administrator accounts and documentation belong to the company, even though the partner uses them daily. This way switching partner is always possible without anything depending on a single provider.

How does Microsoft 365 support fit with the rest of IT support?

Microsoft 365 is rarely a company’s only system. Alongside it there are computers, a network, printers and industry software. The most natural model is for the same partner to manage the Microsoft 365 environment as part of overall IT support, so that the user calls one place regardless of whether the fault is in Teams or in the network. If the company uses a different suite of tools instead of Microsoft’s, the same thinking applies.

Test whether you can spot a scam message: the scam quiz shows with eight messages which signs you notice and which slip past.

Want to know what shape your Microsoft 365 environment is in? See how our cloud services work, or tell us about your situation and we’ll go through the environment together.