Connecting Multiple Tenants
Aether365 supports connecting more than one Microsoft 365 tenant to a single account. This is useful for MSSPs managing multiple clients, organisations with multiple tenants, and security teams that oversee several business units.
Plan limits
The number of tenants you can connect depends on your plan:
| Plan | Tenant limit |
|---|---|
| Free | 1 |
| Pro | 3 |
| Enterprise | Unlimited |
Adding a second tenant
- Navigate to Connect in the sidebar
- Click Add tenant (if you are at your plan limit, this button shows a lock icon with an upgrade prompt)
- Sign in as a Global Administrator of the tenant you want to add
- Grant admin consent on the Microsoft consent screen
- Back on the Connect page, click the edit button next to the new tenant and give it a descriptive label (e.g. "ACME Corp - Production")
The new tenant appears in your connections list. Aether365 will scan it on the same schedule as your other tenants.
Labels
Use descriptive labels for each tenant connection. The label appears in scan results, email reports, Teams notifications, and the tenant switcher - especially important if you manage multiple clients.
Switching between tenants
Use the tenant switcher in the top navigation bar to change which tenant's data you are viewing. The switcher dropdown shows:
- Each tenant's label (custom name or first 8 characters of the GUID)
- The full Microsoft Tenant ID
- A checkmark next to the currently active tenant
- An Add another tenant option (if not at your plan limit)
The dashboard, scan history, and results pages all update immediately when you switch tenants.
Scanning all tenants
Scans run against all connected tenants on the automatic schedule. Each tenant is scanned independently and has its own results and score.
If you trigger a manual scan from the dashboard, it runs against the currently active tenant only (the one shown in the tenant switcher).
To scan a specific tenant via the API, use that tenant's connection ID in the request. See Connections API.
Disconnecting a tenant
To remove a tenant connection:
- Navigate to Connect in the sidebar
- Find the tenant you want to remove and click the remove button
- Confirm the disconnection in the dialog (you may need to type the tenant ID to confirm)
Disconnecting removes the connection from Aether365 and stops future scans for that tenant. Existing scan data is retained according to your plan's retention policy.
For complete removal, also delete the Aether365 enterprise application from your tenant's Entra ID portal: portal.azure.com > Enterprise Applications > Aether365.
MSSP use case
If you are an MSSP managing client tenants, you can use a single Aether365 account to:
- Connect all client tenants from the Connect page
- Switch between clients using the tenant switcher in the top bar
- View each client's compliance posture independently
- Download per-client scan reports from each scan detail page
- Export per-client results as CSV or via the API
- Configure Teams webhooks or email addresses per team member for targeted notifications
Each client's data is stored in isolation - tenant isolation is enforced at the database level. See Security Model.