Overview of the Tenant Configuration Management APIs in Microsoft Graph

In traditional Tenant Configuration Management, any administrator within an organization uses their credentials to access the resources to which they have access. However, administrators don't have full control over the tenant configuration and lack visibility into whether it deviates from the desired configuration state.

The Tenant Configuration Management (TCM) APIs allow administrators to control and manage configuration settings across a single workload or multiple workloads within the organization. The following list shows the supported workloads:

• Microsoft Defender
• Microsoft Entra
• Microsoft Exchange Online
• Microsoft Intune
• Microsoft Purview
• Microsoft Teams

Administrators have the ability to manage tenant configuration through a declarative representation that helps maintain configuration settings in the desired state. This representation can define one or multiple resources, each with one or more associated properties.

Why integrate with the Tenant Configuration Management APIs?

Maintain a secure and consistent tenant configuration

As the Microsoft 365 ecosystem grows, keeping tenant settings aligned with the desired configuration of an organization becomes increasingly complex. Currently, IT administrators often have to manually detect and resolve configuration drift, a process that is time-consuming and prone to error. The TCM APIs address this challenge by enabling automated monitoring of tenant settings. With the monitoring APIs in TCM, you can ensure your configurations remain secure and consistent, and quickly identify any deviations from the desired state.

Easily extract and understand current configuration states

The snapshot APIs in TCM simplify the process of retrieving the current configuration across multiple workloads within a tenant. Administrators can use these snapshots to get a clear, declarative view of how settings are currently applied, which makes audits, reviews, and troubleshooting much easier.

API reference

Looking for the API reference for this service, see Tenant Configuration Management APIs in Microsoft Graph.

Next steps

• To learn how to authenticate and set up the TCM service principal, see Set up authentication for Tenant Configuration Management APIs.
• To learn more about the Tenant Configuration Management APIs, see Tenant Configuration Management APIs in Microsoft Graph.
• Try the Tenant Configuration Management APIs in Graph Explorer.