Summary:
This FAQ explains how to renew a Microsoft Granular Delegated Admin Privileges (GDAP) relationship, including available renewal methods, eligibility requirements, and important considerations for maintaining uninterrupted access to customer environments.
Question: How do I renew a Microsoft GDAP relationship?
Answer: You can renew a Microsoft GDAP relationship in one of the following ways:
Create a new GDAP relationship request.
Enable automatic extension for eligible existing GDAP relationships.
Option 1: Create a New GDAP Relationship
If you choose to renew the relationship manually:
Sign in to Microsoft Partner Center.
Create a new GDAP relationship request.
Select the appropriate roles and relationship duration.
Send the request to the customer for approval.
Once approved, the new GDAP relationship becomes active.
Option 2: Enable Automatic Extension
Automatic extension may be available for existing GDAP relationships when the assigned roles meet Microsoft's eligibility requirements.
To enable automatic extension:
Open the GDAP relationship in Microsoft Partner Center.
Verify that the relationship does not include the Global Administrator role.
Enable the Auto-Extend option, if available.
Important Considerations
GDAP uses the principle of least privilege, helping improve security and governance.
Customers must approve manually created GDAP renewal requests.
Not all role assignments are eligible for automatic extension.
If a GDAP relationship expires without renewal or extension, delegated access to the customer's workloads and services will be removed.
Best Practice
Review GDAP expiration dates regularly and renew relationships before they expire to avoid interruptions in access and administration.
Recommended: Use automatic extension whenever it is available and aligns with your security requirements. This helps reduce administrative effort and minimizes the risk of service disruptions caused by expired GDAP relationships.