Microsoft consultancy
Relimited runs the Microsoft Cloud the way an MSP should: identity first, mail that survives a bad click, endpoints that stay patched, and adoption that does not end at the license invoice. Official documentation lives on Microsoft Learn — we implement it, operate it, and explain it in plain Canadian English.
Product names and documentation belong to Microsoft. Relimited is a Canada-facing managed IT consultancy that implements and operates these tools. Partner Center badges are only claimed when enrolled; this catalogue describes the work we actually do in the stack.
Assess → remediate → operate → improve. Each phase cites Microsoft Learn so owners see the same playbook we run.
01
Licenses vs headcount, Secure Score, MFA coverage, guest sprawl, mail protection, backup reality, and which devices can still sign in without MFA.
02
Close ghost seats, enforce MFA, baseline Conditional Access, turn on Defender for Office 365 where licensed, and document break-glass accounts.
03
Joiners and leavers, patch and endpoint health, Secure Score reviews, restore drills on Professional+, and a quarterly note an owner can actually read.
04
Adoption for Teams and SharePoint, Intune and Purview when the risk asks, Copilot only after permissions are honest — never as a shiny bolt-on to a messy tenant.
Not a rebrand of Fluent purple. These are the operating models we use when we size a tenant, harden identity, or plan adoption for a shop of 8–80.
Business Basic / Standard / Premium and related Microsoft 365 plans — chosen by workload, not by brochure. We map seats to people, then to controls.
Verify explicitly. Least privilege. Assume breach. For a firm of 8–80 that means MFA, Conditional Access, healthy devices, and mail that is not wide open.
Microsoft Secure Score is not a vanity number. We use it to prioritize controls that matter for insurers and for Mondays — then we re-check after change.
A seat that nobody uses is waste. Microsoft’s adoption guidance informs how we roll out Teams, SharePoint, and Copilot readiness without a 90-slide theatre.
Microsoft publishes the SKUs. Relimited maps seats to people and risk — Basic, Standard, or Business Premium — before anyone pays for a fortress they will not use.
Web/mobile Office, Teams, and cloud mail when desktop apps are not required.
Relimited · Often paired with Essential monitoring. We still insist on MFA and tidy licenses.
Desktop Office apps plus the Basic cloud stack — the default for many professional firms.
Relimited · Most Essential / Professional shops land here unless Defender and Intune are in scope.
Identity protection, Intune, and Defender for Business / Office 365 capabilities in one SMB SKU.
Relimited · The SKU behind much of Professional and Premium delivery. We map seats to people before we buy a fortress.
How we use each layer — and how your people should. Official Learn docs open in a new tab.
Identity is the new perimeter. Entra ID is where accounts, MFA, and Conditional Access live.
How Relimited uses it
We design joiners and leavers, Conditional Access baselines, privileged access hygiene, and guest access that does not become a shared password.
How you use it
Staff sign in with their work account. MFA prompts are expected. Guests get the least access that still lets the project finish.
Mail is still the business for most Canadian shops. Exchange Online is the mailbox layer.
How Relimited uses it
License assignment, shared mailboxes, retention-sensible defaults, and Defender for Office 365 controls so invoices stop becoming incidents.
How you use it
Outlook on the web or the desktop app. Shared mailboxes for roles, not personal forwards that never get revoked.
Files that sync are not a disaster plan. SharePoint and OneDrive are collaboration layers — with backup on higher Relimited tiers.
How Relimited uses it
Site structure, sharing defaults, external sharing hygiene, and SaaS backup on Professional and Premium so soft-delete is not your only hope.
How you use it
Work in Teams-connected libraries where possible. Know which files are personal OneDrive vs company SharePoint.
Chat, meetings, and the front door to files. Teams is where adoption succeeds or dies.
How Relimited uses it
Sensible team taxonomy, guest access rules, meeting policies, and training that matches how the shop actually talks.
How you use it
Channels for workstreams, not one giant General that becomes a landfill. Meetings with the right people invited.
Threat protection for mail, identities, and endpoints — including Defender for Business for SMB.
How Relimited uses it
Defender for Office 365 policies, Safe Links / Safe Attachments where licensed, endpoint signals, and incident triage against written SLAs.
How you use it
Treat unexpected MFA prompts and odd invoices as security events. Report phishing with the tools we enable.
Endpoint management: compliance, configuration, and the phone or laptop that is allowed to touch mail.
How Relimited uses it
Enrollment, compliance policies, update rings, and wipe-on-exit for leavers — especially on Premium where MDM is in the lane.
How you use it
Company Portal enrollment when we ask. Keep the device healthy enough to pass compliance.
Data lifecycle, retention, and DLP — the controls insurers and boards increasingly ask about.
How Relimited uses it
Retention labels where they help, DLP on Premium, and PIPEDA-sensible defaults instead of a US checklist taped to the fridge.
How you use it
Follow classification prompts. Do not move regulated files into personal OneDrive to “make sharing easier.”
AI in the productivity suite — only after identity, permissions, and data hygiene are honest.
How Relimited uses it
Readiness assessments: licensing, oversharing cleanup, and training. We will not turn Copilot on into a messy tenant.
How you use it
Treat Copilot as a junior analyst with access to what you can already see. Permissions still matter.
Azure when the workload needs it — security fundamentals first, not a forklift into every service.
How Relimited uses it
Right-size cloud workloads, identity integration with Entra, and security baselines. We will say when Azure is unnecessary.
How you use it
Ask for a cost and a diagram before anyone spins a resource “just to try.”
Not every firm needs these on day one. When they do, we implement them inside the same tenant — not a parallel shadow stack.
Workflow automation in Microsoft 365 — approvals, notifications, and glue between apps without a custom project.
Relimited · Light flows for joiner kits, ticket notifications, and SharePoint approvals. We avoid brittle shadow IT sprawl.
Scheduling for client-facing shops — law, clinics, agencies — inside the Microsoft 365 tenant.
Relimited · Stand up Bookings with the right staff calendars and privacy defaults when the front desk still lives in a shared Excel.
Checklists, not theatre. Each process maps to Microsoft portals and Learn articles so owners can see the same source of truth we use.
A new person should get mail, groups, and MFA without a week of sticky notes.
Tools: Microsoft 365 admin center · Entra admin center · Intune
Most SMB incidents are not nation-state theatre. They are a mailbox still open after someone left.
Tools: Entra admin center · Exchange Online · Intune
A recurring control pass: what Microsoft recommends, what we already do, what we will do next quarter.
Tools: Microsoft Defender portal · Secure Score
Policies that require MFA, block legacy auth, and prefer healthy devices — sized to the shop.
Tools: Entra Conditional Access · Intune compliance
Safe Links, Safe Attachments, and anti-phishing — why Professional exists when the inbox is the business.
Tools: Defender portal · Exchange Online Protection
Licenses without habits are waste. We borrow Microsoft’s adoption model and shrink it for shops of 8–80.
Tools: Adoption Hub · Microsoft 365 usage reports
When we say “we’ll check Secure Score” or “Intune enrollment,” this is where that work happens. Your Global Admin should know these names even if Relimited holds the daily keys.
admin.microsoft.com
Users, licenses, billing signals, and the day-to-day control plane for Microsoft 365.
When: Joiners, leavers, license truth, service health.
entra.microsoft.com
Identity, Conditional Access, app registrations, and privileged roles.
When: MFA, access policies, guest cleanup, role reviews.
security.microsoft.com
Incidents, Secure Score, Defender for Office 365, and hunting signals.
When: Phishing fallout, Secure Score reviews, threat triage.
intune.microsoft.com
Device enrollment, compliance, configuration profiles, and remote actions.
When: MDM on Premium, wipe-on-exit, update compliance.
purview.microsoft.com
Compliance, retention, eDiscovery, and DLP where licensed.
When: Insurer questions, DLP on Premium, retention design.
lighthouse.microsoft.com
Multi-tenant MSP operations — baselines and risk across customer tenants.
When: Relimited delivery bench managing several Canadian shops.
developer.microsoft.com/graph
The API fabric under Microsoft 365 — used carefully for automation, never as a shortcut around identity.
When: Scripted offboarding checks, reporting, approved automations.
Step lists we actually follow. Microsoft Learn articles open beside each runbook so your admin can see the vendor source of truth.
admin.microsoft.com
entra.microsoft.com
security.microsoft.com
intune.microsoft.com
Essential is the Microsoft floor. Professional answers mail and identity. Premium is Intune, Purview, and a vCIO cadence against the Cloud roadmap.
Essential
Tenant hygiene, licenses, MFA basics, monitoring, and a reachable technician — the Microsoft floor.
Professional
Defender for Office 365 patterns, stronger identity, SaaS backup, and Secure Score work that answers insurer MFA/backup questions.
Premium
Intune compliance, Purview/DLP, privileged identity, SOC-style watch, and a vCIO cadence against Microsoft Cloud roadmaps.
Product pages, Learn articles, architecture models, and adoption guides — published by Microsoft. Relimited implements them; we do not mirror copyrighted PDFs on this site.
Next step
A short note is enough: headcount, where you sit, and the last thing that broke. We reply during business hours, Toronto time — with a recommended tier, or an honest one-time clean-up if a retainer is not the right next step. Replies come from info@relimited.com.