Tenant-wide settings apply globally to all users, groups, and applications in a tenant. They control identity behavior, external collaboration, and default security posture.
1. Tenant Properties
Location: Identity → Overview → Properties Includes:
2. User Settings
Location: Identity → Users → User Settings Controls global user permissions such as:
Example: Contoso disables app registration for all users and assigns only the Application Developer role to its DevOps team.
3. External Collaboration Settings
Location: Identity → External Identities → External collaboration settings Defines what guest users can do:
4. Manage Security Defaults
Security Defaults enforce preconfigured security baselines:
Availability: Included at no cost for all tenants to help combat password spray, replay, and phishing attacks.
Example: Fabrikam enables Security Defaults to enforce MFA automatically without purchasing Entra P1 or P2.
5. Configure Tenant Properties
Key fields to maintain:
Best Practice: Always fill out privacy contacts and URLs so Microsoft can reach the correct personnel in case of incidents.