CLI Microsoft365 Script
pnp/cli-microsoft365-mcp-server
Write PowerShell scripts using CLI for Microsoft 365 commands to automate Microsoft 365 management tasks.
Microsoft 365 tenant administration for Global Administrators.
Install Ms365 Tenant Manager
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install borghei/Claude-Skills ms365-tenant-manager --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/engineering/ms365-tenant-manager .claude/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .claude/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-managerType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install borghei/Claude-Skills ms365-tenant-manager --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/engineering/ms365-tenant-manager .agents/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .agents/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install borghei/Claude-Skills ms365-tenant-manager --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/engineering/ms365-tenant-manager .cursor/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .cursor/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/borghei/Claude-Skills.git --path engineering/ms365-tenant-manager--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install borghei/Claude-Skills ms365-tenant-manager --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/engineering/ms365-tenant-manager .gemini/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .gemini/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install borghei/Claude-Skills ms365-tenant-managerInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/engineering/ms365-tenant-manager .github/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .github/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install borghei/Claude-Skills ms365-tenant-manager --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/engineering/ms365-tenant-manager .opencode/skills/ms365-tenant-manager && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "ms365-tenant-manager" agent skill from https://github.com/borghei/Claude-Skills/tree/main/engineering/ms365-tenant-manager into .opencode/skills/ms365-tenant-manager/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ms365-tenant-manager", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
ms365-tenant-manager- GitHub stars
- 886
- Token cost
- ~1.8k tokens
- SKILL.md length
- 743 words
- Files
- 11 (incl. scripts, references)
- Skills in repo
- 354
- Repo updated
- First seen
- Licence
- MIT
At a glance
Microsoft 365 tenant administration for Global Administrators.
- Azure AD user management
- SKILL.md covers Core Capabilities, When to Use, Clarify First and Tools, plus 3 more sections
- Runs Python scripts from its folder
- Exchange Online and Teams config
What it does
Ms365 Tenant Manager is an agent skill from borghei/Claude-Skills. Microsoft 365 tenant administration for Global Administrators. Use for tenant setup, Azure AD user management, Exchange Online and Teams config, Conditional Access policies, license management, and PowerShell bulk-operation scripts.
Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 12 other files, including scripts and reference files (for example `expected_output.json`, `references/operations-and-best-practices.md` and `references/powershell-templates.md`).
It sits in Documents & Office, covering Cloud office suites and Security review. It works with Microsoft 365, PowerShell and Microsoft Entra ID. The repository describes itself as: 385 AI skills, 77 expert agents, and 900 stdlib Python tools for every team: engineering, PM, marketing, C-level, compliance, business ops, research, and a LinkedIn toolkit… The licence is MIT.
When your agent uses it
- Azure AD user management
- Exchange Online and Teams config
- Conditional Access policies
- License management
Example prompts
- “/ms365-tenant-manager”
Requirements
- Python 3
What it can do on your machine
Read from SKILL.md and the folder at commit 4a698e8. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 3 files in scripts/ (Python), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Ms365 Tenant Manager loads about 1.8k tokens when it runs, and up to ~17k if it reads all its reference files. Until then it costs about 63 tokens; SKILL.md has 743 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from borghei/Claude-Skills at commit 4a698e8, republished under its MIT licence (© borghei). 743 words, ~1,849 tokens.
Download SKILL.mdSave it as
.claude/skills/ms365-tenant-manager/SKILL.md (or your agent's skills folder). This skill also uses 10 other files; get the full folder from GitHub.- name
- ms365-tenant-manager
- description
- Microsoft 365 tenant administration for Global Administrators. Use for tenant setup, Azure AD user management, Exchange Online and Teams config, Conditional Access policies, license management, and PowerShell bulk-operation scripts.
- license
- MIT + Commons Clause
- metadata.version
- 1.1.0
- metadata.author
- borghei
- metadata.category
- engineering
- metadata.domain
- cloud-administration
- metadata.updated
- 2026-06-17
- metadata.tags
- microsoft-365, azure-ad, office-365, administration
Microsoft 365 Tenant Manager
The agent generates production-ready PowerShell scripts for M365 tenant setup, bulk user provisioning, Conditional Access policies, security audits, and license management. It automates user lifecycle operations (onboarding, offboarding), recommends license SKUs by role, and produces 7-category security audit reports via Microsoft Graph.
Core Capabilities
- Tenant lifecycle — setup checklists, domain verification, DNS record generation, security baseline, and PowerShell setup scripts for Exchange, SharePoint, Teams.
- User lifecycle automation — bulk provisioning from CSV, secure 11-step offboarding, license recommendations by role/department, group membership suggestions, data validation.
- Security & compliance — Conditional Access policy generation (report-only first), MFA enforcement, and 7-category security audits (MFA, admin roles, inactive users, guests, licenses, mailbox delegations, CA policies).
- License management — SKU recommendations and distribution/cost estimates adjusted for GDPR/HIPAA compliance requirements.
- PowerShell generation — Microsoft Graph-based scripts with error handling, logging, and
-WhatIfsupport.
When to Use
- New tenant setup — generate phased checklist, DNS records, and baseline scripts.
- Security hardening — run audits and stand up Conditional Access / MFA policies.
- Bulk user provisioning or secure offboarding.
- License planning and quarterly utilization review.
Clarify First
Before generating scripts, confirm these inputs. If any is unknown or vague, ASK — do not assume:
- Task — tenant setup, security audit/hardening, bulk provisioning, or offboarding (selects
tenant_setup.pyvspowershell_generator.pyvsuser_management.py) - Tenant inputs — the domain, the user CSV, or the role/department data (the input the modules consume)
- Compliance regime — GDPR/HIPAA or none (adjusts license SKU recommendations and the security baseline)
Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.
Tools
The scripts are importable Python modules (instantiate a class, not a CLI). Full API, parameters, and worked examples are in references/tools-and-workflows.md.
| Tool | Purpose | Entry point |
|---|---|---|
powershell_generator.py | Security audit, Conditional Access, and bulk license scripts | from powershell_generator import PowerShellScriptGenerator |
user_management.py | Provisioning, offboarding, license/group recommendations, validation | from user_management import UserLifecycleManager |
tenant_setup.py | Setup checklist, DNS records, setup script, license distribution | from tenant_setup import TenantSetupManager |
References
Load the reference that matches the task — keep this file lean and pull detail on demand:
- references/tools-and-workflows.md — Quick Start commands, per-tool usage/parameters, the 3 end-to-end workflows (setup, hardening, offboarding), and the full Python module API for all three scripts. Read when running the tools or wiring up the API.
- references/operations-and-best-practices.md — best practices, limitations, required modules/permissions, anti-patterns, the troubleshooting table, and success criteria. Read before hardening a tenant or shipping scripts.
- references/powershell-templates.md — ready-to-use script templates: Conditional Access policy examples, bulk user provisioning, and security audit scripts.
- references/security-policies.md — Conditional Access configuration, MFA enforcement strategies, DLP/retention policies, and security baseline settings.
- references/troubleshooting.md — common error resolutions, PowerShell module issues, permission troubleshooting, and DNS propagation problems.
Show full SKILL.md (306 more words)Show less
Scope & Limitations
What This Skill Covers
- Tenant lifecycle management -- initial setup, domain verification, DNS configuration, security baseline, and service provisioning for Exchange Online, SharePoint, Teams, and OneDrive
- User lifecycle automation -- bulk provisioning from CSV, license assignment by role/department, group membership recommendations, secure offboarding with mailbox preservation
- Security and compliance -- Conditional Access policy generation, MFA enforcement, comprehensive 7-category security audits, and audit log enablement
- PowerShell script generation -- production-ready scripts with error handling, logging,
-WhatIfsupport, and Microsoft Graph best practices
What This Skill Does NOT Cover
- Hybrid identity (AD Connect) -- on-premises Active Directory synchronization and pass-through authentication require the
senior-devopsskill and Microsoft AD Connect tooling - Intune device management -- endpoint compliance policies, app deployment, and mobile device management are outside scope; see
senior-secopsfor device security posture - Power Platform administration -- Power Apps, Power Automate, and Power BI tenant-level governance fall under separate platform administration
- Third-party SSO and SCIM provisioning -- integration with non-Microsoft identity providers (Okta, Ping, Auth0) requires dedicated identity engineering
Integration Points
| Skill | Integration | Data Flow |
|---|---|---|
senior-secops | Security audit findings feed into SecOps incident response and threat remediation workflows | Audit CSV reports (MFA status, admin roles, inactive users) → SecOps triage and hardening actions |
senior-devops | Tenant setup scripts integrate with infrastructure-as-code pipelines for repeatable deployments | Generated PowerShell scripts → CI/CD pipeline execution → tenant configuration state |
senior-architect | License distribution recommendations and tenant topology inform enterprise architecture decisions | License cost analysis and user count projections → architecture capacity planning |
code-reviewer | Generated PowerShell scripts can be reviewed for security anti-patterns and credential handling | PowerShell script output → code review for hardcoded secrets, missing error handling |
aws-solution-architect | Multi-cloud identity federation between Azure AD and AWS IAM for organizations using both platforms | Azure AD tenant configuration → cross-cloud SSO and role mapping |
senior-security | Conditional Access policies and MFA enforcement align with broader organizational security posture | CA policy configurations and security audit results → security policy compliance validation |
© borghei, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 10 other files (scripts, references) in engineering/ms365-tenant-manager of borghei/Claude-Skills.
- SKILL.md
- expected_output.json
- references/operations-and-best-practices.md
- references/powershell-templates.md
- references/security-policies.md
- references/tools-and-workflows.md
- references/troubleshooting.md
- sample_input.json
- scripts/powershell_generator.py
- scripts/tenant_setup.py
- scripts/user_management.py
Open the folder on GitHubat commit 4a698e8
Compare with similar skills
Ms365 Tenant Manager next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Ms365 Tenant Manager this skillborghei/Claude-Skills | 886 | — | ~1.8k | Automated safety check: Pass | MIT | |
| CLI Microsoft365 Scriptpnp/cli-microsoft365-mcp-server | 132 | — | ~3.3k | Automated safety check: Pass | MIT | |
| Entra Agent Usergithub/awesome-copilot | 40k | 1 repos | ~2.3k | Automated safety check: Pass | MIT | |
| CLI Microsoft365pnp/cli-microsoft365-mcp-server | 132 | — | ~3.5k | Automated safety check: Pass | MIT | |
| Ms365 Tenant Manageralirezarezvani/claude-skills | 28k | 1 repos | ~2.8k | Automated safety check: Pass | MIT | |
| Code Reviewpnp/powershell | 906 | — | ~385 | Automated safety check: Pass | MIT |
Similar skills
- Official
Entra Agent User
github/awesome-copilot
Create Agent Users in Microsoft Entra ID from Agent Identities, enabling AI agents to act as digital workers with user identity capabilities in Microsoft 365 and Azure environments.
CLI Microsoft365
pnp/cli-microsoft365-mcp-server
Use CLI for Microsoft 365 to manage Microsoft 365 tenants from the terminal.
Ms365 Tenant Manager
alirezarezvani/claude-skills
Microsoft 365 tenant administration for Global Administrators.
Code Review
pnp/powershell
Reviews changes to PnP PowerShell, a .NET 8 module of 800+ cmdlets for Microsoft 365.
Detecting Email Account Compromise
mukul975/Anthropic-Cybersecurity-Skills
Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible travel, inbox rule creation/deletion (Set-InboxRule…
More from borghei/Claude-Skills
All 354 skills in this repoAgent Harness
borghei/Claude-Skills
Test and evaluation harness for AI agents — scenario suites, deterministic replay, regression diffing, cost and latency budgets.
Agents In The Team
borghei/Claude-Skills
Run delivery when AI coding and ops agents take tickets. An agent skill from borghei/Claude-Skills.
AI Content Disclosure
borghei/Claude-Skills
Check AI-generated marketing content and reviews for required disclosures under the EU AI Act, FTC rules and platform AI-label policies.
AI Prototyping
borghei/Claude-Skills
Idea to AI-generated prototype to customer validation to engineering handoff.
Analytics Engineer
borghei/Claude-Skills
Analytics engineering across data modeling, dbt, transformation, and semantic layers.
Ansoff Matrix
borghei/Claude-Skills
Ansoff Matrix — 4-quadrant framework for growth options: market penetration, market/product development, and diversification.
Related
Categories
Questions about Ms365 Tenant Manager
What does Ms365 Tenant Manager do?
Microsoft 365 tenant administration for Global Administrators. Ms365 Tenant Manager is an agent skill from borghei/Claude-Skills. Microsoft 365 tenant administration for Global Administrators.
When should I use Ms365 Tenant Manager?
Ms365 Tenant Manager fits situations like: azure AD user management; exchange Online and Teams config; conditional Access policies; license management.
How do I install Ms365 Tenant Manager in Claude Code?
Run `npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a claude-code`. Or copy the skill folder (engineering/ms365-tenant-manager in borghei/Claude-Skills) into .claude/skills/ms365-tenant-manager in your project. Claude Code loads it when a task matches its description.
How do I install Ms365 Tenant Manager in Codex?
Run `npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a codex`. Or copy the skill folder (engineering/ms365-tenant-manager in borghei/Claude-Skills) into .agents/skills/ms365-tenant-manager in your project. Codex loads it when a task matches its description.
Can I use Ms365 Tenant Manager in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add borghei/Claude-Skills --skill ms365-tenant-manager -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ms365-tenant-manager, .gemini/skills/ms365-tenant-manager, .github/skills/ms365-tenant-manager and .opencode/skills/ms365-tenant-manager in your project.
What does Ms365 Tenant Manager need to run?
Going by SKILL.md and its folder, Ms365 Tenant Manager needs Python for the scripts in its folder. Our summary lists: Python 3.
Does Ms365 Tenant Manager access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Ms365 Tenant Manager safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Ms365 Tenant Manager use?
Ms365 Tenant Manager is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Ms365 Tenant Manager use?
About 1.8k tokens (SKILL.md is roughly 7.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 15k tokens, read only when the agent opens those files.
What are the alternatives to Ms365 Tenant Manager?
Skills that share tags, products or a category with Ms365 Tenant Manager: CLI Microsoft365 Script (pnp/cli-microsoft365-mcp-server, 132 stars), Entra Agent User (github/awesome-copilot, 40k stars), CLI Microsoft365 (pnp/cli-microsoft365-mcp-server, 132 stars) and Ms365 Tenant Manager (alirezarezvani/claude-skills, 28k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Ms365 Tenant Manager?
borghei (a GitHub user) maintains it in borghei/Claude-Skills, which has 886 GitHub stars. The repository holds 354 skills in this directory. The repository was last updated on October 7, 2026.
Source: borghei/Claude-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.