Product Documentation

CoAdmin Documentation

An autonomous AI agent for Microsoft 365 administration. Investigate, plan, and execute multi-step admin workflows with natural language.

Core Principle

If you have the permission to do it as an admin and a Microsoft Graph API exists for it, CoAdmin can handle it. It's not limited to pre-defined scripts — it reasons about your request and determines the right sequence of actions.

Getting Started

Describe what you need in plain language. CoAdmin will investigate, build a plan, and execute — with your approval on any changes.

Example prompts

  • "Reset Jane Smith's password and revoke all active sessions"
  • "User can't log in — investigate why, find the root cause, and fix it"
  • "Find license waste: which E5 users only use E3 features?"
  • "Device not syncing — retrieve BitLocker key, force Intune sync, and verify compliance"
  • "Upload this Excel file and provision all 50 new hires"

How It Works

CoAdmin follows a six-step reasoning loop for every request:

1

You request

Describe what you need in natural language.

2

CoAdmin investigates

Autonomously gathers context through read-only checks.

3

CoAdmin plans

Breaks down the request into an optimal sequence of steps.

4

You approve

Review the plan and evidence before any changes are made.

5

CoAdmin executes

Performs approved actions directly in your M365 environment.

6

You see results

A complete summary of what was done, including evidence and time saved.

Built for async work: If CoAdmin needs your approval or additional consent, the task pauses. Step away for a meeting and resume exactly where you left off.

Capabilities

Complex Troubleshooting

Investigate login failures, audit sign-in history, identify root causes, and apply fixes. Handle device issues like BitLocker key retrieval, remote reboots, or forced Intune syncs.

Bulk & Data-Driven Operations

Upload Excel files for mass provisioning, bulk organization updates (titles, managers, departments), or group membership management. CoAdmin executes the plan and provides a completion report.

Deep Analysis & Optimization

Find license waste by identifying overprovisioned users. Audit SharePoint sprawl to find ownerless, inactive, or duplicate sites. Search tenant-wide for sensitive documents.

Security & Incident Response

Contain compromised accounts by revoking sessions, disabling access, and pulling evidence. Monitor certificate expiries and unmanaged device access.

Human-in-the-Loop Safety

CoAdmin distinguishes between checking (read-only) and changing (mutating) operations:

Read-only checks

Gathering info, pulling logs, reading configurations — happen autonomously so CoAdmin can build its plan.

Mutating actions

Creating, deleting, or updating resources — always require your explicit approval.

Approval Options

OptionBehavior
Approve OnceExecute this specific action now.
Approve AlwaysAuto-approve this type of routine task going forward. Manage or revoke these rules anytime from Settings → Permissions.
Dry RunSimulate the entire operation without making real changes. Ideal for testing complex workflows safely.

Managing Multiple Tasks

You can trigger bulk prompts that automatically split into individual tasks, for example: "Reset passwords for all users in the Sales department" or "Provision 20 new employees from this Excel file." Each task runs independently and appears in your side panel chat history.

Task Statuses

Active

In Progress Task is currently running.
Dry Run Task is simulating without making real changes.
Approval Requested Your approval request has been sent to an approver.

Attention Needed

Approval Needed Waiting for your approval to proceed.
Information Needed Requires additional information from you.
Required Consent Needs you to grant permissions (e.g., Microsoft OAuth).

Completed

Resolved Task finished successfully.
Unresolved Task finished but couldn't be completed.

Tip: Look for yellow status badges to see which tasks need your attention.

Credits & Usage

Free Access

We are currently providing free access to this version of CoAdmin to help you experience the full power of the AI Agent.

10

Weekly Credits

Each user receives 10 credits, which reset every 7 days.

1

Credit per Task

Most standard admin tasks cost 1 credit. Complex operations may cost more.

Tracking

Your current balance and refresh schedule are visible in the top bar.

Security & Data Privacy

Three-Layer Security Model

1
Identity-Driven

CoAdmin uses delegated permissions from your authenticated session. It can only perform actions you are authorized to perform. All actions are tied to your admin identity and appear in your audit trail.

2
Consent-Aware

If a task requires a permission scope you haven't granted, CoAdmin pauses and asks for your explicit consent before proceeding.

3
Audit-Ready

Every action is logged in standard Microsoft 365 audit logs, maintaining the same compliance and governance as any admin action you take manually.

Data Handling

CoAdmin never stores your Microsoft 365 data. It reads only what's needed to complete your request, performs approved actions, and discards temporary data. You can revoke access at any time from your Microsoft 365 admin center.

Required Permissions

CoAdmin uses standard Microsoft Graph API scopes for admin operations, including user, group, and device management; license and subscription management; MFA and authentication methods; device management (Intune); and SharePoint/Exchange for content operations.

Frequently Asked Questions