> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/setup/installation/gdap-invite-wizard.md).

# Tenant Onboarding

You'll continue to use the Setup Wizard to onboard your client tenants. You can either add a GDAP tenant or a direct tenant if no GDAP relationship exists.

***

## **Wizard Steps for GDAP Tenants**

{% @storylane/embed subdomain="app" url="<https://app.storylane.io/share/p6cyd3t8w8ru>" linkValue="p6cyd3t8w8ru" %}

{% stepper %}
{% step %}

### **Click on "Add a Tenant"**

To get started, we click the "Add a Tenant" button and "Next Step".
{% endstep %}

{% step %}

### Select Tenant Add Method of "Add GDAP Template"

Select "Add GDAP Tenant" and click "Next Step"
{% endstep %}

{% step %}

### Select GDAP Role Template

Select the GDAP Role Template you would like to use for this onboarding. This will automatically map your GDAP security groups with the GDAP roles.

{% hint style="info" %}
If this is your first GDAP tenant, you will be prompted to optionally add the CIPP Default role template. This role template will automatically create the 15 GDAP groups matching the [Recommended Roles](/setup/maintaining-cipp/recommended-roles.md).
{% endhint %}
{% endstep %}

{% step %}

### Click "Create Invite URL" and Consent in Client Tenant

This will generate a unique GDAP invite URL with the associated roles selected from your template. This link will need to be consented by your client's Global Administrator in order to accept the contractual relationship. Once completed, check the box that the invite has been accepted and click "Next Step".
{% endstep %}

{% step %}

### Tenant Onboarding

On this step, you can review the relationship info. Before clicking "Start Onboarding", decide if you want to have the tenant excluded from All Tenants standards to allow you time to review the tenant before those are applied. You can also choose static tenant groups under "Add onboarded tenant to Tenant Groups", and the tenant is added to them once its CPV permissions have been refreshed. Once done, click "Start Onboarding". CIPP will now automatically complete the tenant onboarding. This includes verifying the relationship was accepted, the roles are present in the relationship, the security groups are mapped to the tenant, and the tenant is accessible via Graph API.
{% endstep %}

{% step %}

### Confirm

The final page is a confirmation that shows you what you've completed.
{% endstep %}
{% endstepper %}

## Wizard Steps for Direct Tenants

{% @storylane/embed subdomain="app" url="<https://app.storylane.io/share/kcszcpgdcg6m>" linkValue="kcszcpgdcg6m" %}

CIPP will also allow you to manage tenants that you do not have a GDAP relationship with.

{% stepper %}
{% step %}

### Click on "Add a Tenant"

To get started, we click the "Add a Tenant" button and "Next Step".
{% endstep %}

{% step %}

### Click on "Add Direct Tenant"

Select "Add Direct Tenant" and click "Next Step"
{% endstep %}

{% step %}

### Click "Connect to Tenant"

Click the "Connect to Tenant" button. Use a service account with equivalent permissions as the partner tenant. More information on these roles can be found under [Recommended Roles](/setup/maintaining-cipp/recommended-roles.md).

{% hint style="info" %}
Be sure to consent on behalf of the organisation to prevent prompts for future users who may log in to CIPP, such as a co-managed client technician.
{% endhint %}
{% endstep %}

{% step %}

### Confirm

The final page is a confirmation that shows you what you've completed.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Do not attempt to add your partner tenant as a direct tenant. This will result in a permission error. To add your partner tenant, please see [Tenant Mode](/user-documentation/cipp/advanced/super-admin/tenant-mode.md) and select "Multi Tenant - Add Partner Tenant" or "Single Tenant - Own Tenant Mode".
{% endhint %}

### Limitations of Direct Tenants

There are limitations to what CIPP can do with directly added tenants due to some features relying on Lighthouse, Partner Center APIs or authentication via GDAP;

* Admin Portal Links - These utilise the GDAP relationship to log in as your CSP user. You will have to log in to the portal with an account native to the tenant
* Alerts - There are certain alerts that will only work with GDAP/Lighthouse
  * Alert if Defender is not running
  * Alert if Defender Malware found
* Inactive Users Report - Relies on a CSP report


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.cipp.app/setup/installation/gdap-invite-wizard.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.