Gridheart Microsoft 365 Integration Terms

    Version 2026-11. These terms apply from 7 December 2026 or, if later, from the time You accept them in the Platform when You activate the Microsoft 365 integration.

    1. Scope and relationship to the Partner Terms

    1.1 Scope. These Microsoft 365 Integration Terms ("Integration Terms") govern Your use of the Microsoft 365 integration in the Platform. They are terms presented in the Platform for a specific feature under Section 1.2(6) of the Gridheart Partner Terms and form part of the Terms. Capitalised terms not defined here have the meaning given in the Partner Terms.

    1.2 Acceptance. You accept these Integration Terms when an administrator of Your account activates the Microsoft 365 integration in the Platform. You must not activate the integration unless You accept them.

    1.3 Personal data. Gridheart processes personal data through the integration as Your processor or sub-processor under the Gridheart Data Processing Terms, including Appendix 3.

    1.4 Liability. Liability arising out of or relating to the integration is always governed by Section 15 of the Partner Terms, including the cap in Section 15.1.

    2. Definitions

    "Activation Session" means the temporary sign-in by an administrator of Your Microsoft partner tenant that the Platform uses to activate Customers for the integration.

    "Customer Tenant" means the Microsoft 365 tenant of a Customer that You have activated for the integration.

    "GDAP" means Microsoft's granular delegated admin privileges, the relationships through which a Microsoft partner is given administrative access to a customer's tenant.

    "Integration" means the Microsoft 365 integration in the Platform, including the Cloudbridge application that Gridheart registers with Microsoft.

    "Partner Tenant" means Your Microsoft partner tenant.

    "Service Account" means the dedicated account in Your Partner Tenant that You connect to the Integration.

    3. Your authorisation

    3.1 Access. You authorise Gridheart to access the Partner Tenant and, through Your GDAP relationships, each Customer Tenant, and to act in them on Your behalf as You have configured the Integration. This may include:

    1. reading Your GDAP relationships and their roles;
    2. reading users, groups, domains, licences and subscriptions in Customer Tenants;
    3. creating user accounts, assigning and removing licences, adding and removing members of groups that You allow, and blocking and unblocking sign-in in Customer Tenants;
    4. where You switch on the insights level, reading sign-in activity and multi-factor authentication registration status.

    3.2 Activation. During an Activation Session, You authorise Gridheart to add the Integration's security group to the GDAP relationships You select, to install the Cloudbridge application in the Customer Tenants You select, and to create GDAP relationship requests that You choose to send to Customers. The credentials used in an Activation Session are not stored.

    3.3 Connected system. The Integration is a connected system under Section 6.2 of the Partner Terms. Section 6.2 applies to it, including that Gridheart is not liable for actions taken in line with Your settings.

    4. Your responsibilities

    4.1 Authority from Customers. You must ensure, before You activate a Customer, that:

    1. the Customer has approved Your GDAP relationship and has authorised You to administer its Microsoft 365 tenant in the way the Integration does;
    2. Your agreement with the Customer permits You to use Gridheart as Your processor or sub-processor, and lists Gridheart where the Customer requires it; and
    3. You have informed the Customer's users as required by law.

    4.2 Service Account. The Service Account must be dedicated to the Integration, protected by multi-factor authentication and kept free of administrator roles in the Partner Tenant. You are responsible for its security under Section 3.3 of the Partner Terms.

    4.3 Roles. You must grant the Integration's security group only the roles that the Platform lists for the level You choose. You must remove roles and access that are no longer needed, as required by Section 12.4 of the Partner Terms.

    4.4 Actions. You are responsible for all actions taken through the Integration by Your Users, including Your Customers' personnel to whom You give access to the customer portal, including their consequences in Customer Tenants and towards Your Customers, as set out in Section 4.7 of the Partner Terms.

    4.5 Microsoft terms. You and Your Customers must comply with Microsoft's terms for the tenants and licences concerned, including the Microsoft Customer Agreement and Microsoft's requirements for partners.

    5. Limits of the Integration

    5.1 What the Integration does not do. Apart from the GDAP role assignments and GDAP relationship requests that You select during an Activation Session, the Integration does not create or change administrator roles or administrator accounts. It does not reset passwords of existing users, and it is designed not to act on users that the Platform identifies as holding an administrator role. These limits are part of the design of the Integration and are not a warranty that a Customer Tenant is secure.

    5.2 Safeguards. Gridheart may refuse, delay or pause any action, or suspend the Integration for a Customer, for You or for all partners, where it reasonably considers this necessary for security, to comply with law or Microsoft's requirements, because roles are broader than needed, or because volume limits are reached. Gridheart may set and change volume limits.

    5.3 No obligation to act. The Integration is a tool for You to use. Gridheart has no obligation to monitor Customer Tenants or to take any action in them on its own initiative.

    6. Customer portal

    6.1 Your settings. You decide for each Customer whether the customer portal shows Microsoft 365, whether the Customer's personnel may view or manage users and licences, which licences and groups they may use, and whether they may order more licences. Section 6.5 of the Partner Terms applies.

    6.2 Orders. An order for licences placed by a Customer's personnel in the customer portal is an order placed by You under the Terms. The resulting Fees are payable by You, whether or not You have approved the order or invoiced the Customer.

    7. Licences outside the Platform, switches and transfers

    7.1 Information only. The Platform's classification of a Customer's subscriptions, including subscriptions not bought through Gridheart, is information under Section 6.3 of the Partner Terms.

    7.2 Switch at renewal. If You order a subscription to replace a subscription from another provider at renewal, You are responsible for cancelling or not renewing the existing subscription with that provider, and for any overlap.

    7.3 Transfers. If You request a transfer of subscriptions to Gridheart, You agree, in addition to Section 10.2 of the Partner Terms, that Gridheart may share the Customer's name, tenant identifier, contact email address and subscription details with Microsoft and its authorised distributors and, through Microsoft, with the current provider, to the extent needed to create and complete the transfer. A transfer depends on Microsoft and on approval by the current provider. Gridheart does not guarantee that a transfer is accepted or completed, or when.

    8. Insights level

    The insights level is optional. If You switch it on, You must have a lawful basis for the processing and inform the data subjects. You must not use it to monitor the behaviour or performance of individual employees beyond licence and security administration.

    9. Disconnection and suspension

    9.1 Disconnection. You may disconnect the Integration at any time in the Platform. Gridheart then deletes the Integration's tokens and stored data as set out in Appendix 3 of the Data Processing Terms. You are responsible for removing the Cloudbridge application and the Integration's security group from Customer Tenants and Your GDAP relationships.

    9.2 Suspension and end of the Terms. The Integration is suspended while Your access to the Platform is suspended, and ends automatically when the Partner Terms end.

    10. Microsoft

    Microsoft is not Gridheart's subcontractor for the Integration. Gridheart has no control over Microsoft's services, interfaces, permissions or programmes, which Microsoft may change, suspend or withdraw at any time, including by revoking GDAP access. Gridheart may change or end the Integration to follow such changes and is not responsible for their consequences.

    11. Liability and indemnity

    11.1 Liability. All liability of Gridheart arising out of or relating to the Integration is governed by Section 15 of the Partner Terms. Within that Section, Gridheart is not responsible for the content or consequences of actions taken in Customer Tenants in line with Your settings or by Your Users, for the security of the Partner Tenant or the Customer Tenants, or for any act or omission of Microsoft.

    11.2 Indemnity. Section 14.1 of the Partner Terms applies to claims arising out of or relating to Your use of the Integration, including claims by Customers or their personnel and claims arising from a breach of Section 4 or Section 8.

    12. Changes

    Gridheart may change these Integration Terms in accordance with Section 16 of the Partner Terms.