Microsoft change, from identity outwards

Identity and access architecture

Identity has become the control point for everything else in a Microsoft estate.

We design and rationalise identity so that access reflects how the organisation actually works. That usually means bringing Active Directory and Entra ID into a coherent hybrid design, replacing piecemeal policies with a planned Conditional Access model, reducing standing privileged access, and putting joiner, mover and leaver processes on a governed footing.

Typical engagements

• Identity and access reviews with prioritised findings
• Hybrid identity design and Active Directory clean-up
• Conditional Access and multi-factor authentication design
• Privileged access reduction and Entra ID Governance
• Identity planning for mergers and reorganisations

Technology: Entra ID, Active Directory, Conditional Access, Entra ID Governance, Privileged Identity Management

Tenant and data consolidation

Mergers, acquisitions and reorganisations nearly always end in a tenant decision.

We plan and deliver Microsoft 365 tenant mergers and migrations, and the cross-tenant arrangements that keep organisations working together while that happens. The planning starts with people, data and identity, so that the migration tooling is the last decision rather than the first.

Typical engagements

• Tenant consolidation strategy and target design
• Identity mapping and cutover planning
• Exchange Online, OneDrive, SharePoint and Teams migration
• Cross-tenant collaboration and free/busy sharing
• Licensing alignment and decommissioning

Technology: Microsoft 365, Exchange Online, SharePoint, Teams, cross-tenant synchronisation

Governance, security and compliance

Controls only count if they are still working a year after the project.

We help organisations achieve and keep Cyber Essentials and Cyber Essentials Plus, move devices to cloud management, and structure information so it can be governed. The emphasis is on controls that become part of normal operation rather than a one-off effort before an assessment.

Typical engagements

• Cyber Essentials and Cyber Essentials Plus readiness and remediation
• Intune and Windows Autopilot device management
• Microsoft Defender configuration
• SharePoint information architecture and Microsoft 365 governance
• Sensitivity labelling and data protection with Purview

Technology: Intune, Autopilot, Defender, Purview, SharePoint

AI and intelligent automation

Interest in Copilot usually arrives before the foundations needed to support it.

Microsoft 365 Copilot and AI agents work within the permissions and data an organisation already has, so our AI work starts with readiness: oversharing, data classification, identity, ownership and usage policy. From there we build connected solutions with Copilot Studio, Power Platform and Power BI that make better use of the Microsoft technology an organisation already owns. Our construction and logistics demonstration shows the approach in practice.

Typical engagements

• AI strategy, readiness and governance review
• Copilot readiness and oversharing review across SharePoint and Teams
• AI usage policy and governance frameworks
• Copilot Studio agents grounded in SharePoint and business data
• Power BI and Power Automate alongside AI
• Private and locally hosted AI (in development)

Technology: Microsoft 365 Copilot, Copilot Studio, Power Platform, Power BI, Purview

Azure and hybrid infrastructure

Not every workload belongs in the public cloud, but every workload needs managing.

We design and deploy Azure and Azure Local infrastructure for organisations that need cloud services alongside on-premises control, and we modernise the Windows Server and Active Directory estates that sit underneath. The goal is one estate, managed consistently, whatever its location.

Typical engagements

• Azure landing zone and hybrid design
• Azure Local design and deployment
• Windows Server and SQL Server modernisation
• Monitoring, backup and operational handover

Technology: Azure, Azure Local, Azure Arc, Windows Server, SQL Server

Power Platform and integration

When business systems disagree, someone has to own the data flows.

We build business applications and workflows on the Microsoft platform, and design integration between Microsoft and line-of-business systems such as construction and finance platforms. Where specialist developers are involved, we define the requirements and assure the delivery on the client's behalf.

Typical engagements

• Power Apps and Power Automate solutions on Dataverse
• Integration architecture and data flow mapping
• Vendor requirements and technical due diligence
• Power BI reporting on trusted data

Technology: Power Apps, Power Automate, Dataverse, Power BI, Procore, Sage 200

Technical assessments

Most engagements start here, and some end here.

A short, fixed-scope assessment gives an organisation, its board or its partner an independent view of where it stands and what to do first. Assessments are useful on their own and as the first stage of a larger programme.

Typical engagements

• Microsoft 365 tenant and security review
• Technology landscape assessment for reorganisation or merger
• Technical due diligence on systems and suppliers
• Integration feasibility studies

Technology: Microsoft 365, Entra ID, Azure, line-of-business systems