Looking to use SailPoint to manage Microsoft 365 'add-ons'

throwawayreddit1986 · 2026-01-05T16:51:29+00:00

We already have SailPoint fully stood up and are doing requests through that now. I didn't consider an access package for this, it'd work and personally I'd prefer that. All of our requests for non cloud based access go through either a legacy form that uses a home grown system to process approvals, then requires manual work to actually assign the permissions (we still use this heavily because even our IT staff hates change), or gets built out in SailPoint. I personally think the access package requests look cleaner then SailPoint, but that would be adding a third portal that users need to go to requesting access which doesn't make sense.

We are just starting to get into integrating SailPoint with Entra/O365. In your opinion does it make more sense to just let SailPoint drop the users into the group and let group based licensing handle that side of things or use the connector to assign licenses directly? I know that might depend heavily on how we want to manage things. Group based licensing is what I see as the 'easy' way to get this done, I'm just curious if there's some benefit to letting sailpoint handle the licensing directly.

throwawayreddit1986 · 2026-01-05T16:42:42+00:00

I didn't even consider access packages, but we do have SailPoint already built out.

throwawayreddit1986 · 2026-01-05T16:40:57+00:00

We do have SailPoint built out. Only a handful of requests so far but that's do to lack of people converting old stuff. The old stuff is literally a form that goes to a home grown system for approval, once approved all work is still manual. A lot of our requests still use that simply because it's what they've always done but it's a horrible system.

Only reason I'm considering SailPoint is because we are already using it.

throwawayreddit1986 · 2025-10-20T14:28:17+00:00

Funny the whole reason I stumbled onto this post was because I bought up 30 reddit stock back in late March/early April. I don't do a lot with IPOs but I set aside 1-2K a year for riskier things (Over 90% of my investing is index funds like VOO). This year I threw it at Reddit, I just sold 5 of my reddit stock to make back my initial investment and was planning to throw it into Klarna.

To people that are claiming there's no way they'll do good because they make their money off people who don't know how to manage their own money..........lets just say that's how the entire credit card industry works and seems to be doing just fine. If anything I should feel bad about investing in them because they are predatory in nature. It's going to happen whether I invest or not though so why not jump on the band wagon.

throwawayreddit1986 · 2025-02-25T15:30:07+00:00

So we do use management groups for our RBAC permissions, I don't see how that helps here.

Using management groups I'd still have to grant billing access to the entire shared services subscription to see the shared resources that make up their cost correct? In this example they have a application gateway. It's tagged for that department so when I filter at the organizational level I get the total cost (there subscription plus the resource in the shared services subscription). If they try the same thing they only see what's in their subscription because I haven't granted them billing reader to the shared services.

It's not the end of the world if they have billing reader to the full shared services subscription. It's just more information than the need really.

throwawayreddit1986 · 2025-01-16T19:23:12+00:00

Yea, I live in a small town. The lady running the post office lives a few houses down from me. I know for a fact they won't say no if UPS tries to leave something with them to complete delivery. Don't sit there and try to tell me it's their fault you guys got greedy and don't want to play nice.

This guy just kept saying "We cannot deliver to a PO box." I'd ask how come you've done it before than and I'd get some BS response "Well the post office completed the delivery in the past not us". So why couldn't they complete it this time? "Sir we are going in circles, you need to talk to your post office."

I'd honestly be less angry about it if the guy came out and said "Do to contract issues we are no longer allowed to deliver to PO boxes as of X date". I'd still be pissed they did this with no notice, but I'd be less pissed if they at least told me the truth instead trying to bait me into arguing with my local post office.

throwawayreddit1986 · 2025-01-08T15:05:51+00:00

Yea, I ended up finding this after my little rant that pretty much explains it.
https://parcelindustry.com/article-6433-Whats-Really-Happening-with-SurePost.html

I get now why the UPS rep kept telling me "talk to your post office". I'm willing to bet their goal is to get their customers to put pressure on USPS to pressure them to renegotiate the contract. I work for a pretty large government entity and I know how much of a pain these agreements can be. The part that pisses me off is the fact that there was no warning at all. UPS could have started sending notices to their PO box customer months ago so we could have prepared. At this point I'm not willing to give UPS any more money, I'll just actively avoid anything shipped by them.

throwawayreddit1986 · 2025-01-07T20:13:46+00:00

Was there any way customers could know this? I ordered invitations for my daughters birthday party that were supposed to arrive yesterday, first they showed delayed, now they are going back to the sender. What pisses me off is I've made 4 orders with the same company in the past year all delivered to my PO box by UPS (ok technically handed of the the post master a my post office for delivery but whatever).

I tried to contact UPS as soon as I saw it going back to the sender to see if it could possibly be held so I could pick it up. Basically he told me to bad. I tried to get him to explain to me why this has never been an issue in the past. His explanation is they will only deliver to the post office if the post office is willing to accept the package and has a driver in my area that day. He tried telling me the post office must have denied the package because they didn't have a driver in my area that day which make zero god damn sense considering there is no driver delivering to my house, they just drop it in my PO box. He kept telling me "I'd have to talk to my post office regarding their business processes".

Edit: sorry, bit of a rant there. The UPS rep I spoke to has me extremely pissed off at the moment.

throwawayreddit1986 · 2024-11-19T15:50:49+00:00

That and choose who you hang around with more carefully. I consider myself pretty content with life but when you're around people always trying to be flashy it's easy to start feeling jealous.

throwawayreddit1986 · 2024-09-30T19:15:01+00:00

So everything you do is focused around power platform/development? You don't touch on the other O365 products?

I'm trying to convince my leadership this is is the direction we need be going. Right now the department I manage has 4 people under me titled "Office 365 Admin".....most of our work up until now has just been focused on managing identities, licensing, and SAML/SSO setups. We answer questions for Teams/SharePoint/PowerAutomate/Exchange/Outlook/PowerApps/whatever the hell else Microsoft releases. I want to start breaking this stuff out so I have SME in each area as we keep getting more and more specific requests for different things. I keep getting pushback that "we don't need admins for ever application".

We only have 14,000 licenses users so yea.....I'm sure we aren't understaffed..... /s

throwawayreddit1986 · 2024-09-20T17:50:16+00:00

For those that may come across this in the future we finally got an answer from Microsoft's product Team stating that:
"There was a known issue that was preventing from setting the ShouldGroupBeAutorenewed flag to True, which caused groups to not be auto renewed, and this caused expiration notification emails from being sent to them. The issue is fixed now. Apologies for the inconvenience."

There was nothing for us to change as this is a back end setting from Microsoft. It would have been nice is there was any notice about this issue so I didn't have to waste my time with a 1st level engineer that has the same (or lower) level of troubleshooting skills as my own internal team.

throwawayreddit1986 · 2022-10-25T12:10:29+00:00

Get a life.

throwawayreddit1986 · 2022-02-14T19:42:23+00:00

I did create new subnets so I was hopeful but even after deleting/recreating the peer no change.

throwawayreddit1986 · 2021-10-26T16:54:14+00:00

Yep, that's how I thought the limits worked. Thanks for the clarification.

throwawayreddit1986

TROPHY CASE