GDAP

Granular Delegated Admin Privileges (GDAP) is the modern access model for Microsoft partners (CSPs, MSPs) managing customer Microsoft 365 tenants. GDAP replaces the older Delegated Admin Privileges (DAP), which gave partners broad Global Administrator access across every customer tenant. With GDAP, partners are granted specific Entra ID roles with time-bound durations (typically renewed annually), scoped to specific tasks. Microsoft mandated GDAP migration for all CSP customer relationships during 2022–2023. Result: partners can only do what they need to do, customers retain control, and the audit trail is per-action. Configured by the customer in the Microsoft 365 admin center under partner relationships.