Deployment Prerequisites
Everything you need to prepare in your Microsoft 365 tenant and Azure subscription before Proventeq deploys Proventeq365 — licensing, deployment identity, RBAC, resource providers, Entra app registration, and DNS.
This guide describes everything you need to prepare before Proventeq deploys Proventeq365 into your Microsoft 365 tenant and Azure environment. Complete all the steps across these pages and share the requested details with your Proventeq contact before the agreed deployment date.
Who should read this
This guide is intended for:
- Microsoft 365 / Azure administrators — managing the tenant, subscription, and identity settings.
- Security administrators — responsible for Conditional Access, MFA, and identity governance.
- Network administrators — relevant only if outbound restrictions, proxies, or private networking are in scope.
Scope and assumptions
- Proventeq365 is deployed into your Azure subscription and Microsoft 365 tenant.
- Proventeq deploys a dedicated Azure resource group that you create and control.
- You are responsible for providing the required access and approvals in line with your organisation's security policies.
- Important: Never send passwords, client secrets, or certificates by email. Share sensitive values only through your approved secure channel.
Roles and responsibilities
| Area | Your responsibilities (Customer) | Proventeq's responsibilities |
|---|---|---|
| Azure subscription | Create the resource group, grant RBAC access to the deployment identity, approve any domain/DNS changes, and optionally register Azure resource providers. | Deploy Azure resources and validate provisioning once access is in place. |
| Microsoft 365 tenant | Provide tenant admin contacts, create or invite the deployment account, and approve app registration permissions including admin consent. | Configure Proventeq365 integration and complete post-deployment app registration tasks (e.g. redirect URIs and certificates). |
| Security & governance | Ensure your MFA and Conditional Access policies allow the agreed deployment approach, and approve any exceptions needed. | Provide a least-privilege access recommendation and support access verification. |
In this section
- Readiness Checklist — Confirm every prerequisite is complete before the deployment date.
- Microsoft 365 Prerequisites — Licensing, deployment mode, and archiving.
- Azure Prerequisites — Resource group, deployment identity, RBAC, and resource providers.
- Entra ID App Registration — Register the application and grant API permissions.
- Custom Domain and DNS — Only if a custom domain is required.
- Next Steps — What to share with Proventeq once you are ready.
Tip: The Entra app registration can be automated with the Entra App Creation Script in the Appendix.