Avvi help and answers
Answers for MSP administrators running Avvi, grouped by topic. Each answer links to the full guide with steps and verification.
Getting started
What is Avvi and what can it do?
Avvi lets an MSP run Microsoft 365 administration in plain English across every client tenant through GDAP, with approval controls and a full audit trail on every action.
How do I connect a client tenant to Avvi?
You add a client’s Microsoft 365 tenant by starting a connection in Avvi, then having a Global Administrator in that tenant grant admin consent so Avvi can act through GDAP.
How do I grant admin consent for a client tenant?
A Global Administrator in the client tenant opens Avvi’s admin-consent request, reviews the requested permissions, and grants consent so Avvi’s application can operate in that tenant.
How do I invite my team and set their permissions?
An MSP Master Admin invites technicians as MSP Admins, gates access with an Entra security group, and sets per-feature toggles so each technician sees only the tenants and actions they should.
Consent and permissions
How do GDAP and admin consent work in Avvi?
GDAP establishes your partner relationship with a client tenant and is what lets you reach the consent screen. Admin consent authorizes the Avvi application to work inside that tenant, and is what governs day-to-day operations.
Why does admin consent fail with an AADSTS error?
Admin consent fails most often because a non-admin tried to consent, a required service or app service principal is missing, or the tenant is only partially consented. A Global Administrator re-running tenant-wide admin consent resolves most cases.
Why is a feature missing from my Avvi portal?
A missing feature or tenant is almost always a permission gap: your MSP Admin role is not in the mapped security group, a feature toggle is off, or the tenant’s GDAP roles or consent do not cover that action.
What happens when access or permissions change?
When GDAP roles, security-group membership, feature toggles, or admin consent change, Avvi’s access changes with them, and a technician usually has to sign in again before the new scope takes effect.
Using AI chat
How should I phrase requests so Avvi acts accurately?
Name the client tenant, identify the user by their full email or user principal name, and state the exact outcome you want, then review Avvi’s restatement before confirming.
Why does Avvi ask me to confirm before making a change?
Avvi requires explicit confirmation before any action that creates, changes, disables, or deletes something, so nothing runs unattended. Read-only requests run without a confirmation step.
What do I do when Avvi cannot complete a task?
When Avvi cannot complete a task it is usually a permission or consent gap, an action outside its supported scope, an unresolved request, or a Microsoft-side error. The chat message names which, and the fix follows from there.
How do I read the audit history of Avvi’s actions?
Open the history for an Avvi action to see the original request, the exact action Avvi took, the tenant and object it affected, who approved it, the time, and the result.
Account and security
Why did my Avvi session time out, and how do I sign back in?
Avvi sessions expire after a period of inactivity as a security measure. When prompted, sign in again through Microsoft and complete multi-factor authentication to resume where you left off.
How does tenant isolation keep client data separate?
Avvi keeps every client tenant’s data separate: actions and data never cross between one client tenant and another, or between one MSP and another, and each action runs in the scope of a single named tenant.
Where do I find the audit trail?
The audit trail lives in the Avvi portal and records every action across your tenants with the person who ran it, the tenant and object affected, who approved it, the time, and the result. Filter it by tenant, user, and date.
Cannot find your answer
Browse the full help center, or contact support and a person will pick it up.
Ask Avvi
Support assistant
Get help with Avvi
Avvi’s support chat runs on desktop only, so it cannot be reached from a phone. On mobile, email us or book a demo and a person will pick it up.
Email info@avvi.cloudInclude your MSP name and the client tenant. Book a demoA live walkthrough, scheduled in Microsoft Bookings. Browse the help centerStep-by-step guides and answers.