Overview

This article walks you through everything you need to start using Optimize365: preparing your network, creating your account, onboarding your MSP organization, and connecting your first client's Microsoft 365 tenant so you can run a security scan.

Prerequisites

Make sure DNS filtering is not blocking access to optimize365.io and its subdomains. If your organization requires domain allowlisting (whitelisting), allow the following domains:

• www.optimize365.io
• optimize365.io
• api.optimize365.io
• app.optimize365.io
• login.optimize365.io
• clientp-login.optimize365.io

Create Your Account

Register

Go to https://app.optimize365.io.

If you don't have an account, click "New user? Create an account".

Complete all required fields and choose a strong password.

Check your inbox for the confirmation email and click the confirmation link to verify your email address.

Set up multi-factor authentication (MFA)

When prompted, set up MFA by scanning the QR code with an authenticator app such as Google Authenticator or Microsoft Authenticator.

Onboard Your MSP Organization

After your account is set up, an onboarding process creates your MSP organization. You'll be asked for information such as your MSP name.

Connect Your First Client

NFR (Not for Resale) license

You automatically receive an NFR (Not for Resale) license so you can connect your MSP's own Microsoft 365 account for testing, learning, and evaluation.

Step 1: Grant admin consent

Click CONNECT to begin the admin consent process.

This creates a read-only application registration that requires admin consent from your client's Microsoft 365 environment.

Step 2: Grant Global Reader permissions

In addition to the basic permissions, Optimize365 needs the Global Reader role for comprehensive scanning. The recommended method is the Optimize Role Granter, a temporary helper app that assigns the Global Reader role to the Optimize365 application and then permanently removes itself from the tenant.

1. Click Open Permission Window and approve the permissions in the popup.
2. Click Assign Roles to complete the role assignment.

If the permission window is blocked, or you prefer an alternative, click Having trouble? to use Microsoft Device Login or to assign the role manually (see Manually enabling the Global Reader Role for Optimize365).

Step 3: Confirm the connection

Once both admin consent and Global Reader permissions are configured, the CONNECT toggle shows as enabled.

Step 4: Run your first scan

With the client connected, start your first security scan to analyze their Microsoft 365 environment for security misconfigurations, vulnerabilities, and compliance issues.

Step 5 (optional): Enable remediation

To fix security misconfigurations automatically, enable remediation for the client. See Remediation.

Other Ways to Connect a Client

The CONNECT toggle and Optimize Role Granter above are the standard path. Optimize365 also supports other connection methods so you can match each client's policies:

• Your client won't share an admin account with you — send them a consent link. See Generate Client Login Consent Share Link.
• You need to assign Global Reader by hand or by script — see Manually enabling the Global Reader Role for Optimize365.
• You need the full permission and role list for a security review — see Required Permissions & Roles.

Troubleshooting

The Optimize365 app or login page won't load

DNS filtering may be blocking optimize365.io or one of its subdomains. Allow every domain listed under Prerequisites, then try again.

The permission window doesn't open

Your browser may be blocking the popup. Click Having trouble? to use Microsoft Device Login or assign the Global Reader role manually.

Need more help

Contact support at support@optimize365.io or use the integrated chat feature.

Related Articles

• Remediation
• Generate Client Login Consent Share Link
• Manually enabling the Global Reader Role for Optimize365
• Required Permissions & Roles
• Authentication