Product Documentation
CoAdmin Documentation
An autonomous AI agent for Microsoft 365 administration. Investigate, plan, and execute multi-step admin workflows with natural language.
Core Principle
If you have the permission to do it as an admin and a Microsoft Graph API exists for it, CoAdmin can handle it. It's not limited to pre-defined scripts — it reasons about your request and determines the right sequence of actions.
Getting Started
Describe what you need in plain language. CoAdmin will investigate, build a plan, and execute — with your approval on any changes.
Example prompts
- "Reset Jane Smith's password and revoke all active sessions"
- "User can't log in — investigate why, find the root cause, and fix it"
- "Find license waste: which E5 users only use E3 features?"
- "Device not syncing — retrieve BitLocker key, force Intune sync, and verify compliance"
- "Upload this Excel file and provision all 50 new hires"
How It Works
CoAdmin follows a six-step reasoning loop for every request:
You request
Describe what you need in natural language.
CoAdmin investigates
Autonomously gathers context through read-only checks.
CoAdmin plans
Breaks down the request into an optimal sequence of steps.
You approve
Review the plan and evidence before any changes are made.
CoAdmin executes
Performs approved actions directly in your M365 environment.
You see results
A complete summary of what was done, including evidence and time saved.
Built for async work: If CoAdmin needs your approval or additional consent, the task pauses. Step away for a meeting and resume exactly where you left off.
Capabilities
Complex Troubleshooting
Investigate login failures, audit sign-in history, identify root causes, and apply fixes. Handle device issues like BitLocker key retrieval, remote reboots, or forced Intune syncs.
Bulk & Data-Driven Operations
Upload Excel files for mass provisioning, bulk organization updates (titles, managers, departments), or group membership management. CoAdmin executes the plan and provides a completion report.
Deep Analysis & Optimization
Find license waste by identifying overprovisioned users. Audit SharePoint sprawl to find ownerless, inactive, or duplicate sites. Search tenant-wide for sensitive documents.
Security & Incident Response
Contain compromised accounts by revoking sessions, disabling access, and pulling evidence. Monitor certificate expiries and unmanaged device access.
Human-in-the-Loop Safety
CoAdmin distinguishes between checking (read-only) and changing (mutating) operations:
Read-only checks
Gathering info, pulling logs, reading configurations — happen autonomously so CoAdmin can build its plan.
Mutating actions
Creating, deleting, or updating resources — always require your explicit approval.
Approval Options
| Option | Behavior |
|---|---|
| Approve Once | Execute this specific action now. |
| Approve Always | Auto-approve this type of routine task going forward. Manage or revoke these rules anytime from Settings → Permissions. |
| Dry Run | Simulate the entire operation without making real changes. Ideal for testing complex workflows safely. |
Managing Multiple Tasks
You can trigger bulk prompts that automatically split into individual tasks, for example: "Reset passwords for all users in the Sales department" or "Provision 20 new employees from this Excel file." Each task runs independently and appears in your side panel chat history.
Task Statuses
Active
Attention Needed
Completed
Tip: Look for yellow status badges to see which tasks need your attention.
Credits & Usage
Free Access
We are currently providing free access to this version of CoAdmin to help you experience the full power of the AI Agent.
10
Weekly Credits
Each user receives 10 credits, which reset every 7 days.
1
Credit per Task
Most standard admin tasks cost 1 credit. Complex operations may cost more.
Tracking
Your current balance and refresh schedule are visible in the top bar.
Security & Data Privacy
Three-Layer Security Model
Identity-Driven
CoAdmin uses delegated permissions from your authenticated session. It can only perform actions you are authorized to perform. All actions are tied to your admin identity and appear in your audit trail.
Consent-Aware
If a task requires a permission scope you haven't granted, CoAdmin pauses and asks for your explicit consent before proceeding.
Audit-Ready
Every action is logged in standard Microsoft 365 audit logs, maintaining the same compliance and governance as any admin action you take manually.
Data Handling
CoAdmin never stores your Microsoft 365 data. It reads only what's needed to complete your request, performs approved actions, and discards temporary data. You can revoke access at any time from your Microsoft 365 admin center.
Required Permissions
CoAdmin uses standard Microsoft Graph API scopes for admin operations, including user, group, and device management; license and subscription management; MFA and authentication methods; device management (Intune); and SharePoint/Exchange for content operations.