Product Updates
AccessLens for MSPs: One Pane of Glass for Client CA Governance
Professional now covers your client tenants as well as your own: 5 included, self serve capacity up to 100, and volume pricing that drops to $4 per tenant per month. Here is how it works and what it costs.
Stephen Devlin · · 5 min read
If you run security for more than a handful of Microsoft 365 customers, you already know the Conditional Access problem. Every client tenant has its own policy set, its own exclusions that nobody documented, and its own admin who "temporarily" disabled MFA for the finance team in 2023. Reviewing them means signing in and out of portals all day, and whatever you find lives in a spreadsheet until the next review.
AccessLens Professional now covers this properly. One subscription, your first 5 tenants included, and self serve capacity for up to 100 client tenants with volume pricing that drops as you grow. No sales call required for any of it.
How It Works
Each client tenant connects through the same read-only OAuth flow AccessLens uses for a single tenant. No agents, no service accounts, no standing cross-tenant access.
If you assign your engineers a dedicated account in each client tenant, granting the role takes a few lines:
# Grant Security Reader to your MSP account in the client tenant
Connect-MgGraph -Scopes "RoleManagement.ReadWrite.Directory" -TenantId "<client-tenant-id>"
$role = Get-MgRoleManagementDirectoryRoleDefinition -Filter "displayName eq 'Security Reader'"
New-MgRoleManagementDirectoryRoleAssignment -RoleDefinitionId $role.Id `
-PrincipalId "<your-account-object-id>" -DirectoryScopeId "/"Where Client Data Lives
Signing in creates a read-only session per tenant. Policy contents are fetched straight from Microsoft Graph and analysed on your machine. Our servers only ever hold the tenant registration and your subscription.
What You Actually Get Per Client
Everything in Professional runs against whichever tenant is active: the full gap analysis (50+ checks), conflict detection, the policy matrix, What-If simulation, compliance reporting against five frameworks (Microsoft Entra recommendations, CIS, CISA, NCSC and Maester), and PDF export for the client-facing report. A CA review stops being a day of portal archaeology per client. Connect the tenant, read the gap analysis, spend your time on the findings that matter.
Pricing
Professional is $75/month, or $60/month billed annually, and includes 5 tenants and 15 users. Additional client tenants get cheaper as you add more:
Worked examples, billed annually:
Capacity is adjusted from inside the app: add tenants when you win a client, reduce when you lose one, and the difference is prorated. At the top of the range, full CA analysis costs less per client per month than a coffee. Past 100 tenants, contact sales@accesslens.co.uk for an enterprise arrangement.
Getting Started
- Sign in at accesslens.co.uk and choose Professional from the Pricing page. The checkout asks how many client tenants you need and shows the price as you type.
- Add each client tenant from the Tenants page with a Security Reader account.
- Run the gap analysis per client and export the PDF for your service review.
Existing Professional customers can add capacity from the Tenants page with the Buy capacity button. The docs cover the details, including role requirements and per-tenant consent.