> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ctrlconnect.nl/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect your Microsoft 365 tenant

> Choose a data region, grant CtrlConnect the Microsoft Graph permissions it needs, and request approval from a Global Administrator if required.

The first time you sign in, CtrlConnect walks you through connecting your Microsoft 365 tenant. You choose where your data is stored and grant the Microsoft permissions CtrlConnect needs to read and manage your tenant.

## Choose a data region

The region you pick sets where CtrlConnect stores your tenant data. You can choose:

* **North America**
* **Europe**

CtrlConnect saves your choice and uses it every time you sign in.

> [!WARNING]
>
> Choose your region carefully. You can't change it yourself after your tenant is set up. Contact [support@ctrlconnect.nl](mailto:support@ctrlconnect.nl) if you need to move regions.

## Grant permissions

Microsoft requires a Global Administrator to consent before CtrlConnect can access your tenant. The permissions page groups the requested access into two capabilities:

| Capability | What it enables |
| - | - |
| **Read** | Lets CtrlConnect read users, workspaces, sharing, licenses, audit logs, and security detections for reports and queues. |
| **Remediation** | Lets you take action from CtrlConnect, such as blocking sign-in, reclaiming a license, or archiving a site. |

Each capability card lists the exact Microsoft Graph permissions it requests. The page also explains what admins can and can't do with those permissions, and how to revoke them.

**1. Review the requested permissions**

Read the capability cards and the access explanation on the **Grant permissions** page.

**2. Continue in Microsoft**

Click **Continue in Microsoft**. Microsoft opens its own consent dialog, where you sign in as a Global Administrator and accept.

**3. Return to CtrlConnect**

After you accept, Microsoft returns you to CtrlConnect and your tenant is connected.

## Request approval from an administrator

If you aren't a Global Administrator, you can still start the setup:

1. On the **Grant permissions** page, click **Request approval**.
2. Enter your Global Administrator's email address and send the request.
3. Your administrator receives a notification to review and approve the permissions.

While you wait, CtrlConnect shows a **Pending approval** page. After the request is approved, you can continue to the console.

## Revoke access

You can remove CtrlConnect's access at any time from the Microsoft Entra admin center, the same way you remove any enterprise application. After you revoke access, CtrlConnect can no longer read or change your tenant.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.