Skip to main content

Multi-Tenant Management

Robopack supports connecting and managing multiple Microsoft Intune tenants from a single organisation. This is ideal for MSPs, enterprises with multiple Entra ID tenants, or organisations managing separate environments.

Connecting multiple tenants

Follow the same process as connecting your first tenant for each additional tenant. Each tenant can be connected using either the Admin Consent or User-based method. There is no stated limit on the number of connected tenants.

Per-tenant permissions

In Settings > Tenants, you can configure granular permissions for each tenant:

PermissionControls
See / Read informationWho can view apps and settings for this tenant
Upload appsWho can import packages to this tenant
Set configurationWho can modify tenant settings
Set permissionsWho can manage access control for this tenant

Access can be granted to all users, specific users, or an Entra ID security group.

Per-tenant SSO

Each tenant can have SSO independently configured:

  • SSO enabled — users from that tenant can sign in via Entra ID
  • SSO disabled — no Entra ID sign-in for that tenant's users

Per-tenant Custom App Settings

Custom App Settings can be scoped per tenant. A global setting applies to all tenants, but you can create tenant-specific overrides. This allows different tenants to have different configurations for the same app — for example, different licence files or install parameters.

MSP / Partner features

MSPs and partners get a Partner button for managing multiple customer tenants. Partners can:

  • Manage customer tenants independently from their parent organisation
  • View and manage apps across all connected tenants
  • Use cross-tenant group search when configuring deployment waves

When editing targets in Robopatch flows or patch groups, you can search for target groups across multiple tenants at the same time and add multiple targets to a wave in one step.

Removing a tenant

You can remove a tenant entirely from Robopack in Settings > Tenants. Any apps or other items created by Robopack in the tenant will remain in Intune after removal.

note

It is not currently possible to transfer packages between tenants directly. Each tenant manages its own package inventory.