FAQ
Questions and Answers
What MSPs ask about Altivane. For the detail, see the security page and, for signed-in customers, the user guide.
Getting started
What is Altivane?
A Windows desktop application for MSPs that manage their clients' Microsoft 365 tenants and Azure subscriptions. It covers Exchange Online, Entra ID, Intune, SharePoint, Teams, Defender and Azure: browse and change each client's tenant, produce branded reports, and automate routine tasks as workflows.
What does it need?
A computer running 64-bit Windows 10 or later, a licence key and an internet connection to activate it, and an administrator account in each client tenant to register Altivane there. It installs from a single file, as a setup program or a Windows Installer package for deployment with Intune or Group Policy, and needs nothing else on the computer. A few optional features, such as Teams settings, need a PowerShell module and tell you which.
Can I try it before I buy?
Not from this site. To ask about trying Altivane, contact us.
Connecting to a client's tenant
Do I have to set up an app registration in each tenant?
Altivane does it for you. You sign in to the tenant once as an administrator, choose the access Altivane gets, and it creates the app registration, uploads a certificate, grants admin consent, assigns the roles and tests each service. You can also sign in interactively with an administrator's own account and register nothing, with fewer features available.
What access does it ask for?
You choose: Reports (read only), Helpdesk (read, plus the changes made on the Users page), Manage (read and change, except SharePoint site changes), Everything, or a custom selection. Each option can list its permissions and roles before anything is granted, and Altivane only ever adds access; you take it away in the Entra admin centre.
Can I sign in with a partner or guest account?
Yes. When you add a tenant, enter its domain or tenant ID first, then sign in with the guest or partner account.
Where is my clients' data kept?
On your computer. Reports, documents and change logs go to an output folder with a folder for each tenant; settings are a .json file; anything kept between sessions is encrypted for your Windows account. There is no Altivane cloud service holding tenant data. How Altivane handles access and data has the detail.
What does it contact?
Of its own, the licensing service, to activate and renew the licence, and the update service, only when you select Help > Check for updates. If you turn AI summaries on, it also contacts the provider you add. How Altivane handles access and data has the detail.
Working safely
Can it change something I did not mean to change?
A change runs from a window that shows the change, what it applies to and the tenant, and nothing is sent until you run it. A workflow can be test run first, which lists each change without making it. Run from the window, a workflow step that removes something always asks. With Reports access, nothing can be changed at all.
Is there a record of what was changed?
Yes. Every change sent is written to the tenant's change log: the change, its target, the values before and after where they can be read, the command, who was signed in, and which Windows account and computer made it. It is a CSV file you can open in Excel, and it's on unless you turn it off in Settings.
Reports and documents
What do the reports produce?
An Excel workbook for each tenant, with a sheet for each table. Scorecard reports also rate what they find as OK, Warning or Critical and feed a Word document for the client, built from a template with the client's name and logo.
How do AI summaries work, and what do they send?
They are optional and off until you add an AI provider of your own (Anthropic, or any service that uses the OpenAI API, including Azure OpenAI or a model on your own computer). A summary is written from the scorecard reports' headings, status counts and summary figures; names and detail tables are never sent, and a record of exactly what was sent is saved beside each document.
Automation
What is a workflow?
A repeatable task made of steps, such as offboarding a leaver: read the tenant, make changes, run reports and write files. Start from a sample, such as Offboard a Leaver or Lock Down Stale User Accounts, or build your own on a canvas. A test run shows what a workflow would change before it runs for real.
Can reports and workflows run on a schedule?
Yes. Altivane runs reports, builds documents and runs workflows from the command line without a window, so Windows Task Scheduler can run them when you choose, for the tenants you select, 1 after another. Scheduled runs need certificate sign-in. A scheduling engine inside Altivane is on the roadmap.
Can I work across several tenants at once?
Not at once. The pages work on 1 tenant at a time, chosen in the Tenant box. Build documents and scheduled runs go through the tenants you select, 1 after another, each with its own files. Running tasks across several tenants at once is on the roadmap.
Licensing
How does the licence work?
A licence key activates Altivane for a Windows account on a computer, and renews in the background while the computer is online. To move to another computer, deactivate the old one, which frees its seat, and activate the new one with the same key.
What support is included?
Support by email, and the updates released during your licence term, are included in the licence fees unless your order says otherwise. The support and maintenance policy says what support covers, the response targets and which versions are supported.
Where are the licence terms?
The end user licence agreement sets the terms of each licence. The privacy policy and the data processing and security statement say what we hold and how we protect it. The rest are listed under Legal at the foot of every page.
What does it cost?
Pricing isn't published. To ask, contact us.