Skip to content

Setup

This guide walks you through connecting Qezaro Orbit to your customers’ Microsoft environments. The process takes about 10–15 minutes and consists of five steps.

# Step What you’ll do
1 Add Entra App Register or use a Qezaro-created Microsoft Entra App
2 Add Customers Add customer tenants individually, in bulk, or via fetch
3 Authorize App Authorize the Entra App in each customer’s BC Admin Center
4 Grant Consent Grant admin consent per customer (or ask them to)
5 Run Sync Trigger a sync to start populating data

Make sure you have:

  • Access to the Microsoft Entra admin center (required only if using your own Entra App)
  • Your customers’ Tenant IDs
  • A Dynamics 365 Administrator or Cloud Application Administrator role in each customer’s tenant (for the authorization step)

The two permission steps require different roles in the customer’s tenant:

Step Required role
Step 3 — Authorize the Entra App Dynamics 365 Administrator or Cloud Application Administrator
Step 4 — Grant admin consent Global Administrator or Cloud Application Administrator (or a DAP relationship) — Dynamics 365 Administrator is not sufficient

Orbit uses a Microsoft Entra App to make API calls to your customers’ tenants. You have two options — pick the one that fits your setup:

  1. Go to https://entra.microsoft.com/ and sign in.
  2. Navigate to App registrations and create a new app.

App registrations

  1. Fill in the registration form:
    • Name — give your app a recognizable name
    • Supported account types — select “Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)”
    • Redirect URI — select Web from the dropdown and enter: https://orbit.qezaro.com/reseller

App registration form

After registering the app, go to Certificates & secrets and create a new client secret.

Certificates and secrets

New client secret

Give it a name and set an expiration date.

Client secret form

Client secret value

Next, grant the app the permissions it needs to make API calls to the Business Central Admin Center.

API permissions

Add permissions

Select API

Grant permissions

Once the app is set up in Entra, go to Company Settings in Orbit and enter the values you just created.

Company settings

Copy the values directly from the Microsoft Entra admin center — Application (client) ID, Directory (tenant) ID, and the client secret value.

Enter values


This is the fastest option. Orbit will create a unique Microsoft Entra app under its own tenant on your behalf.

In Orbit, go to Company Settings and click “Use Qezaro Created”.

Use Qezaro Created

That’s it — no additional configuration needed. Continue to Step 2.


Add the customers whose environments Orbit will manage. You have three ways to do this:

Click Add CustomerAdd Single Customer and fill in the form:

Field Description
Company name A label to help you identify the customer
Tenant ID The customer’s Microsoft Entra Tenant ID
Cust. Admin User’s Email (Optional) The customer admin’s email — used later to request permissions via the built-in email feature
Assign Category (Optional) The customer’s category

Add single customer

Single customer form


Best for onboarding many customers at once.

  1. Click Add CustomerBulk Upload.
  2. Download the Excel template and fill in the columns:
Column Description
companyname Customer’s company name
TenantId Customer’s Tenant ID
AdminEmail (Optional) Customer admin’s email address
CategoryName One or more categories, separated by semicolons (;)
  1. Upload the completed file. Refresh the page to see the new customers appear.

Bulk upload


Use this if you’ve already granted admin consent and want to avoid entering Tenant IDs manually.

Click the Fetch Tenants button — Orbit will retrieve a list of customers your Entra App is authorized to manage. Select the right tenant, give the customer a name, and add them.

Fetch tenants


Each customer must authorize the Entra App before Orbit can access their data.

Go to the Authorization Steps page in Orbit. The page shows the App ID and step-by-step instructions for authorizing in each customer’s Business Central Admin Center.

Authorization steps page

Authorization in BC Admin Center

Completed authorization


The last permission step: granting admin consent for each customer. You’ll do this per customer.

If you have access (DAP relationship, or Global Admin / Cloud Application Administrator role in the customer’s tenant): Grant consent directly from the Authorized Microsoft Entra Apps page in the BC Admin Center.

If you don’t have access: Share the URL from the customer’s Authorization Steps page and ask their administrator to grant consent.


You’re almost done! The final step is to trigger a sync to start pulling data into Orbit.

  • Global Sync — syncs all customers at once
  • Individual Sync — syncs a specific customer

Once the sync completes, refresh your browser to see the data populate.