What is GDAP?
Microsoft is investing in the new GDAP feature set to allow partners such as Telstra to control more granular and time-bound access to their customers’ workloads administered through the Microsoft 365 Admin Center, and support an advanced security and governance model.
You can find further information about GDAP via Microsoft, here.
Why is GDAP being introduced?
GDAP is being introduced to provide better security to you by enabling the capability for time-bound and least privilege access.
Is GDAP replacing Delegated Admin Privileges (DAP)?
Yes. If you’re transacting through DAP with Telstra today, we'll transition you to GDAP. .
When will Telstra transition my services under GDAP?
We expect to migrate all customer services to GDAP in April 2023. We'll let you know about the migration dates in advance.
Do I need to do anything?
You don't need to be available during the migration and there are no actions for you to during the migration period. However, in the future, your Global Administrator may be requested to accept new GDAP relationship with Telstra to enable Telstra to continue to provide support for your Microsoft services with Telstra.
When will the GDAP relationship expire?
The GDAP relationship is defined by Telstra. It is set, by default, to the maximum period of two years.
Will there be downtime for my services during GDAP transition?
No. Your services will continue to run as normal during the GDAP migration.
Can I continue to use DAP, or do I have to be transitioned under GDAP?
DAP and GDAP will coexist during the transition period. However, GDAP will eventually replace DAP so that we have a more secure solution for you.
While DAP and GDAP coexist, will there be any changes to the way a DAP relationship is created?
There are no changes to the existing DAP relationship flow while DAP and GDAP coexist.
Is it possible to make the GDAP relationship permanent?
No. Permanent GDAP relationships are not possible for security purposes. The maximum duration for a GDAP relationship is 2 years. It’s also not possible to auto-renew GDAP relationships.
How can I extend or renew the GDAP relationship?
We'll resend the GDAP relationship request to you as relationships are about to expire. Your Azure Global Administrator will need to approve the request sent via email for Telstra support staff to access your Microsoft tenant and provide support.
Who will receive the GDAP relationship termination or renewal notification email?
Within your organization, the Billing Administrator and Global Administrator agent will receive the email. It's important to keep those contacts up to date in Telstra Apps Marketplace (TAM) and Telstra Cloud Sight (TCS).
What happens if I manually remove the GDAP relationship?
If you remove the GDAP relationship, we won't have access to your Microsoft tenant and will not be able to provide support accordingly. We recommend you do not remove Telstra GDAP permissions from your tenancy unless you have a good reason to do so.
In a situation where GDAP permissions are removed and you still need support, for Telstra to support you in a timely manner, you'll need to have a Global Administrator available to approve the GDAP permission requests from Telstra. These requests are normally sent by email to the tenancy admins.
What happens if I don’t accept a GDAP relationship in the future?
Telstra’s ability to maintain the current level of support may be impacted. For example, we won't be able log a support case with Microsoft on your behalf.