cross-tenant-identity

Consolidate cross-tenant identity governance across five hub-and-spoke tenants.

Updated Apr 10, 2026
One-click install
npx skills add https://github.com/t-granlund/ctu-dashboard --skill cross-tenant-identity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cross-tenant-identity
Source: https://github.com/t-granlund/ctu-dashboard/tree/main
Command: npx skills add https://github.com/t-granlund/ctu-dashboard --skill cross-tenant-identity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires Microsoft.Graph, MicrosoftTeams, and includes scripts (resource) components.

What problem does it solve?

HTT Brands operates a hub-and-spoke multi-tenant Microsoft 365 environment with complex cross-tenant identity governance requirements. This skill codifies a unified framework to govern B2B collaboration, cross-tenant access, Direct Connect, guest lifecycle, attribute-based and domain-based dynamic groups, MTO synchronization, and governance workflows across all five tenants.

Core Features & Use Cases

  • B2B collaboration governance, deny-by-default posture, and per-partner overrides across five tenants
  • Domain-based and attribute-based dynamic groups to gate access across SharePoint, Teams, Fabric/Power BI, and other HTT resources
  • Multi-Tenant Organization (MTO) synchronization, guest lifecycle management, CA for external users, Teams federation, and identity governance with quarterly reviews

Quick Start

Use this skill to plan and implement a unified cross-tenant identity architecture for HTT Brands across hub-and-spoke tenants.

Frequently Asked Questions about cross-tenant-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure cross-tenant access policies for B2B collaboration in a multi-tenant environment?

Cross-tenant access policies for B2B collaboration are configured using a deny-by-default posture with per-partner overrides across hub-and-spoke tenants. This framework governs guest lifecycle and external user access centrally.

What is the best way to synchronize identities across a Multi-Tenant Organization?

Multi-Tenant Organization (MTO) synchronization unifies identity governance across five tenants. It handles B2B Direct Connect, cross-tenant sync, and Teams federation to maintain consistent identity states.

Can I use dynamic groups to gate access across SharePoint and Teams for external users?

Domain-based and attribute-based dynamic groups gate access across SharePoint, Teams, and Fabric/Power BI. They dynamically group external users to enforce governance boundaries for HTT resources.

Does Microsoft Graph support cross-tenant identity governance and quarterly access reviews?

Microsoft Graph supports cross-tenant identity governance by enabling identity governance workflows and quarterly access reviews. It manages SharePoint cross-tenant permissions across 200+ locations.

How do I enforce Conditional Access for external users across multiple tenants?

Conditional Access for external users is enforced by applying cross-tenant access policies within the unified governance framework. It secures B2B collaboration across the five hub-and-spoke tenants.