Created by Claude - please verify

Cross-tenant sync - identity synchronisation and automatic redemption per partner, plus multi-tenant organisation members.

Required Microsoft Graph permissions

Policy.Read.All MultiTenantOrganization.Read.All CrossTenantInformation.ReadBasic.All (tenant names, optional) — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1.

Endpoints: GET /v1.0/policies/crossTenantAccessPolicy/partners · GET .../partners/{tenantId}/identitySynchronization ($batch) · GET /v1.0/tenantRelationships/multiTenantOrganization/tenants · GET /v1.0/tenantRelationships/findTenantInformationByTenantId

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Cross-tenant Synchronisation & Multi-tenant Organisation

Cross-tenant synchronisation lets another tenant's admins create and update users in your directory, and automatic redemption suppresses the consent prompt. That is by design for mergers and multi-tenant organisations, and a quiet backdoor if nobody remembers it. Cross-tenant Access covers B2B trust; this report covers identity sync.