User accounts
Organise Microsoft Entra ID accounts around employees and roles, match permissions to business needs and plan reviews when people join, change responsibilities or leave the company so that access follows their situation.
Microsoft Entra ID
Microsoft Entra ID, access your business can understand.
Microsoft Entra ID for SMEs: organise identities, MFA, external access and leavers, with clear rules matched to working practices and available licences.
SMEsat the heart of what we do
A dedicated contactwho knows your business
A local teamin French-speaking Switzerland
Suitable tools. Local support. A team close to you.
Geneva
Lausanne
Fribourg
Neuchâtel
Valais
Know who can access what.
Microsoft Entra ID supports authentication and identity management for Microsoft cloud services and compatible applications. For an SME, the task is to establish a clear view of employee accounts, administrators, guests and identities used by applications.
An access review starts with their current purpose, rather than the number of accounts shown in a console. We can compare business roles with assigned permissions and identify exceptions needing clarification. This complements your business cybersecurity approach by assigning ownership to access decisions, including decisions about accounts that no longer have an obvious owner.
Multifactor authentication
Review Microsoft Entra ID authentication methods and prepare users for MFA with a pilot, understandable guidance and a recovery procedure for situations where their usual methods become unavailable during normal business operations.
Conditional Access
Assess Microsoft Entra ID Conditional Access policies against available licences and applications, test their effects on representative user profiles and document exceptions as well as the conditions for reversing a disruptive change.
Guest accounts
Inventory guest accounts in Microsoft Entra ID, identify the owner of each collaboration and reassess permissions when an assignment changes or access to business resources is no longer justified by the work involved.
Administrative roles
Distinguish privileged Microsoft Entra ID accounts from ordinary access, document the roles and authorised people and prepare controlled recovery access without distributing secrets in a list shared broadly across the organisation.
Application identities
Identify identities used by applications in Microsoft Entra ID, confirm their purpose and permissions with a responsible owner, then include them in access reviews for the cloud environment that your business operates.
How we support you.
From initial scoping to ongoing support, the agreed work and each party’s responsibilities are defined with you before implementation.
Audit and risk analysis
A review of your environment, identification of vulnerabilities and a prioritised action plan.
Access protection
Securing identities, MFA, permissions and workstations.
Environment security
Workstations, email, Microsoft 365, networks and backups.
Team awareness
Workshops and training to build good everyday habits.
Monitoring and detection
Alert monitoring and a prompt response to incidents.
Ongoing support
Follow-up, optimisation and support from a dedicated contact.
Solutions suited to your sector.
We start with your teams’ needs, business applications and organisational constraints.
Professional services
Share client files between colleagues, with appropriate access and documents that are easy to find.
Healthcare & medical
Protect patient records and maintain the tools needed for consultations.
Property & construction
Find plans and files on site while keeping control of access for everyone involved.
Local authorities & associations
Organise access for employees, elected representatives and volunteers, and make handovers easier when teams change.
A well-managed environment.
Tools alone are not enough. Ongoing management, access and documentation need to remain clear over time.
Access and security
Roles, permissions and protections suited to the agreed scope.
Continuity
Identified dependencies, with backup and recovery arrangements to prepare.
User management
Documented joiners, leavers and changes in responsibility.
Monitoring and records
Accessible configuration, licence and upcoming renewal records.
Understand your options before deciding.
Uses, limitations and frequently asked questions: the points to clarify when preparing your project.
Match protection to your licences.
Microsoft Entra security defaults provide a baseline for suitable environments. Conditional Access policies allow more detailed rules and require appropriate licences, including P1 or P2 depending on the capabilities used.
The project should check what is already enabled, which authentication methods people use and which applications could be affected. Prepare users and test a representative group before extending a rule. Exceptions should be justified, limited and reviewed rather than becoming permanent by default. Make sure the business understands the effect of a policy before approving it.
Plan starters, role changes and leavers.
An account should follow the person's situation. For a new starter, a manager approves useful access; when a role changes, previous permissions need review; when someone leaves, data and access need coordinated handling.
The procedure should also cover external applications, devices and shared folders. Microsoft Intune may be involved for managed devices and applications. Removing access should not unintentionally remove information colleagues need or material the business must retain. Specify who approves the timing, who performs the technical steps and who verifies completion.
Document privileged access and recovery.
Administrative accounts need a separate inventory showing assigned roles and the people authorised to use them. Also plan how legitimate access can be restored if normal authentication methods become unavailable.
We can scope documentation of emergency access, sign-in checks and alert handling. Secrets should not be placed in an ordinary list shared with everyone. IT governance helps define change approvals and review frequency while keeping your business in control. Recovery arrangements should be tested under an agreed procedure, without disrupting normal access.
Does Entra ID replace our local Active Directory?
Not automatically. Microsoft distinguishes Entra ID, Active Directory Domain Services and Entra Domain Services. Local applications may depend on specific protocols or capabilities. Identify those dependencies before removing a directory, changing device sign-in or choosing a hybrid architecture. Similar naming does not mean the services can be substituted without assessment.
Is MFA enough to secure every form of access?
It is an important protection, but it does not correct excessive permissions, a compromised device or an application granted inappropriate access. Review authentication methods, privileged accounts, sharing and recovery procedures as well. Business approval is still needed to determine who should access information. Treat MFA as part of the control framework, rather than the whole framework.
How do we avoid locking everyone out with a policy?
Identify affected applications and user profiles, then prepare a pilot and a controlled recovery method. Schedule changes and check their effects before broad rollout. The engagement should specify who can decide to reverse a configuration and how users will be informed if essential access is disrupted. Keep the original settings and the reason for the change documented.
Why work with Sunitech on your Microsoft Entra ID project?
Advice and solution selection
Review of your needs, comparison of options and clearly explained priorities.
Deployment and integration
Preparation, configuration, testing and coordination with the relevant providers.
Support and development
Agreed support scope, documentation, licences and next steps.
A project? A question?
Let’s discuss your needs.
An initial conversation to understand your situation and decide on the next steps together.
Contact us
- Review of your environment
- Understanding your business challenges
- Guidance and recommendations
- No obligation