MSP & Multi-Tenancy

An account is either MSP or Direct. An MSP account manages multiple client tenants from a single dashboard, each with its own storage destination, schedule, and workload configuration.

What an MSP account gets

  • Every client tenant visible and manageable from one dashboard, with aggregate stats across all of them.
  • Independent storage destination, backup schedule, and workload selection per client tenant.
  • Optional per-client Microsoft Entra app registration, described below.
Direct and MSP share the same dashboard
The navigation is functionally identical between the two account types. The only differences are a label (“Clients” vs. “My Tenant”) and an account-type badge. No feature is hidden from Direct accounts or exclusive to MSP at the navigation level.

Per-client Azure AD app registration

This is an MSP-scale feature. Instead of every client tenant authenticating through one shared Microsoft Entra app registration, an MSP can configure a separate app registration per client.

This matters at scale: past roughly 20 tenants under one shared app, Microsoft Graph API throttling starts to bite, because the rate limit is shared across every client hitting that same app registration. A separate registration per client avoids that shared throttling.

White-labeling

White-labeling applies to the self-service portal only — a client can be given a custom domain for their own end users’ self-service portal. The BYOVault operator dashboard itself is not white-labeled.