{"id":43821,"date":"2026-10-19T18:18:03","date_gmt":"2026-10-19T11:18:03","guid":{"rendered":"https:\/\/f-techsolution.com\/?p=43821"},"modified":"2026-10-30T18:23:50","modified_gmt":"2026-10-30T11:23:50","slug":"hieu-tenant-microsoft-365-qua-cau-truc","status":"publish","type":"post","link":"https:\/\/f-techsolution.com\/en\/blog\/hieu-tenant-microsoft-365-qua-cau-truc\/","title":{"rendered":"Hi\u1ec3u tenant Microsoft 365 qua c\u1ea5u tr\u00fac qu\u1ea3n tr\u1ecb v\u00e0 ownership"},"content":{"rendered":"

Hi\u1ec3u tenant Microsoft 365 qua c\u1ea5u tr\u00fac qu\u1ea3n tr\u1ecb v\u00e0 ownership<\/h1>\n

\"Hi\u1ec3u<\/p>\n

Khi doanh nghi\u1ec7p b\u1eaft \u0111\u1ea7u s\u1eed d\u1ee5ng Microsoft 365, m\u1ed9t trong nh\u1eefng kh\u00e1i ni\u1ec7m quan tr\u1ecdng nh\u1ea5t nh\u01b0ng c\u0169ng d\u1ec5 b\u1ecb hi\u1ec3u \u0111\u01a1n gi\u1ea3n qu\u00e1 m\u1ee9c l\u00e0 tenant<\/strong>.<\/p>\n

Nhi\u1ec1u ng\u01b0\u1eddi cho r\u1eb1ng tenant ch\u1ec9 l\u00e0 \u201ct\u00e0i kho\u1ea3n Microsoft 365 c\u1ee7a c\u00f4ng ty\u201d. C\u00e1ch hi\u1ec3u n\u00e0y ch\u01b0a \u0111\u1ea7y \u0111\u1ee7.Microsoft \u0111\u1ecbnh ngh\u0129a Microsoft 365 tenant l\u00e0 m\u1ed9t m\u00f4i tr\u01b0\u1eddng ri\u00eang bi\u1ec7t d\u00e0nh cho t\u1ed5 ch\u1ee9c, bao g\u1ed3m c\u00e1c d\u1ecbch v\u1ee5 Microsoft 365, subscription, license v\u00e0 d\u1eef li\u1ec7u li\u00ean quan. M\u1ed7i tenant l\u00e0 m\u1ed9t m\u00f4i tr\u01b0\u1eddng \u0111\u1ed9c l\u1eadp v\u1edbi tenant kh\u00e1c v\u00e0 \u0111i k\u00e8m m\u1ed9t Microsoft Entra tenant \u0111\u1ec3 qu\u1ea3n l\u00fd user, group, identity v\u00e0 c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng kh\u00e1c.<\/p>\n

C\u00f3 th\u1ec3 hi\u1ec3u \u0111\u01a1n gi\u1ea3n:<\/p>\n

Tenant l\u00e0 ranh gi\u1edbi qu\u1ea3n tr\u1ecb ch\u00ednh c\u1ee7a Microsoft 365 trong doanh nghi\u1ec7p.<\/strong><\/p>\n

B\u00ean trong tenant c\u00f3 th\u1ec3 c\u00f3:<\/p>\n

User.<\/p>\n

Domain.<\/p>\n

License.<\/p>\n

Exchange Online.<\/p>\n

SharePoint.<\/p>\n

OneDrive.<\/p>\n

Teams.<\/p>\n

Microsoft Entra ID.<\/p>\n

Admin roles.<\/p>\n

Security policies.<\/p>\n

Apps.<\/p>\n

Guest users.<\/p>\n

D\u1eef li\u1ec7u v\u00e0 c\u1ea5u h\u00ecnh c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n

V\u00ec v\u1eady, tenant kh\u00f4ng ch\u1ec9 l\u00e0 n\u01a1i \u201c\u0111\u0103ng k\u00fd Microsoft 365\u201d. N\u00f3 l\u00e0 n\u1ec1n t\u1ea3ng m\u00e0 to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng Microsoft 365 c\u1ee7a doanh nghi\u1ec7p \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng b\u00ean tr\u00ean.<\/p>\n

Tenant Microsoft 365 thu\u1ed9c v\u1ec1 ai?<\/h2>\n

\u0110\u00e2y l\u00e0 c\u00e2u h\u1ecfi doanh nghi\u1ec7p n\u00ean tr\u1ea3 l\u1eddi ngay t\u1eeb \u0111\u1ea7u. Tenant n\u00ean thu\u1ed9c quy\u1ec1n ki\u1ec3m so\u00e1t c\u1ee7a ch\u00ednh doanh nghi\u1ec7p.<\/p>\n

D\u00f9 doanh nghi\u1ec7p mua license tr\u1ef1c ti\u1ebfp t\u1eeb Microsoft hay th\u00f4ng qua partner, quy\u1ec1n s\u1edf h\u1eefu v\u00e0 qu\u1ea3n tr\u1ecb tenant kh\u00f4ng n\u00ean ph\u1ee5 thu\u1ed9c ho\u00e0n to\u00e0n v\u00e0o m\u1ed9t c\u00e1 nh\u00e2n b\u00ean ngo\u00e0i. Microsoft cho bi\u1ebft ng\u01b0\u1eddi t\u1ea1o Microsoft Entra tenant ban \u0111\u1ea7u s\u1ebd \u0111\u01b0\u1ee3c c\u1ea5p Global Administrator theo m\u1eb7c \u0111\u1ecbnh. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a t\u00e0i kho\u1ea3n \u0111\u1ea7u ti\u00ean c\u00f3 m\u1ee9c quy\u1ec1n r\u1ea5t cao v\u00e0 c\u1ea7n \u0111\u01b0\u1ee3c qu\u1ea3n tr\u1ecb c\u1ea9n th\u1eadn.<\/p>\n

Doanh nghi\u1ec7p n\u00ean lu\u00f4n bi\u1ebft:<\/p>\n

Ai l\u00e0 Global Administrator?<\/p>\n

Ai c\u00f3 quy\u1ec1n billing?<\/p>\n

Ai qu\u1ea3n l\u00fd domain?<\/p>\n

Partner \u0111ang c\u00f3 quy\u1ec1n g\u00ec?<\/p>\n

Ai c\u00f3 quy\u1ec1n t\u1ea1o ho\u1eb7c x\u00f3a user?<\/p>\n

Ai c\u00f3 th\u1ec3 thay \u0111\u1ed5i security policy?<\/p>\n

N\u1ebfu nh\u1eefng c\u00e2u h\u1ecfi n\u00e0y kh\u00f4ng c\u00f3 c\u00e2u tr\u1ea3 l\u1eddi r\u00f5, ownership c\u1ee7a tenant \u0111ang ch\u01b0a \u0111\u1ee7 ch\u1eb7t.<\/p>\n

Partner c\u00f3 th\u1ec3 qu\u1ea3n tr\u1ecb tenant kh\u00f4ng?<\/h2>\n

Trong nhi\u1ec1u d\u1ef1 \u00e1n, partner c\u1ea7n \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n \u0111\u1ec3 h\u1ed7 tr\u1ee3 tri\u1ec3n khai, troubleshooting ho\u1eb7c migration. Tuy nhi\u00ean, vi\u1ec7c partner c\u00f3 quy\u1ec1n h\u1ed7 tr\u1ee3 kh\u00f4ng \u0111\u1ed3ng ngh\u0129a partner n\u00ean tr\u1edf th\u00e0nh ch\u1ee7 s\u1edf h\u1eefu duy nh\u1ea5t c\u1ee7a tenant.<\/p>\n

M\u1ed9t nguy\u00ean t\u1eafc ph\u00f9 h\u1ee3p l\u00e0:<\/p>\n

Doanh nghi\u1ec7p gi\u1eef quy\u1ec1n ki\u1ec3m so\u00e1t ch\u00ednh.<\/strong><\/p>\n

Partner \u0111\u01b0\u1ee3c c\u1ea5p \u0111\u00fang role c\u1ea7n thi\u1ebft \u0111\u1ec3 th\u1ef1c hi\u1ec7n scope h\u1ed7 tr\u1ee3.<\/strong><\/p>\n

Kh\u00f4ng n\u00ean c\u1ea5p Global Administrator ch\u1ec9 v\u00ec \u201cd\u1ec5 l\u00e0m\u201d.<\/p>\n

Microsoft khuy\u1ebfn ngh\u1ecb \u00e1p d\u1ee5ng nguy\u00ean t\u1eafc least privilege cho administrator role, ngh\u0129a l\u00e0 ch\u1ec9 c\u1ea5p quy\u1ec1n t\u1ed1i thi\u1ec3u c\u1ea7n thi\u1ebft \u0111\u1ec3 ho\u00e0n th\u00e0nh nhi\u1ec7m v\u1ee5.<\/p>\n

V\u00ed d\u1ee5, m\u1ed9t ng\u01b0\u1eddi ch\u1ec9 qu\u1ea3n l\u00fd user kh\u00f4ng nh\u1ea5t thi\u1ebft ph\u1ea3i c\u00f3 Global Administrator.<\/p>\n

M\u1ed9t ng\u01b0\u1eddi ch\u1ec9 qu\u1ea3n l\u00fd Exchange c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng role ph\u00f9 h\u1ee3p v\u1edbi Exchange.<\/p>\n

C\u00e1ch n\u00e0y gi\u1ea3m m\u1ee9c \u0111\u1ed9 r\u1ee7i ro n\u1ebfu m\u1ed9t account qu\u1ea3n tr\u1ecb b\u1ecb compromise.<\/p>\n

Global Administrator m\u1ea1nh \u0111\u1ebfn m\u1ee9c n\u00e0o?<\/h2>\n

Global Administrator g\u1ea7n nh\u01b0 c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o to\u00e0n b\u1ed9 c\u1ea5u h\u00ecnh qu\u1ea3n tr\u1ecb c\u1ee7a Microsoft Entra v\u00e0 Microsoft 365. Microsoft hi\u1ec7n khuy\u1ebfn ngh\u1ecb gi\u1eef s\u1ed1 l\u01b0\u1ee3ng Global Administrator d\u01b0\u1edbi 5 ng\u01b0\u1eddi \u0111\u1ec3 gi\u1ea3m attack surface. Nh\u1eefng account n\u00e0y c\u0169ng c\u1ea7n \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 b\u1eb1ng MFA v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt ph\u00f9 h\u1ee3p.<\/p>\n

\u0110i\u1ec1u n\u00e0y \u0111\u1eb7c bi\u1ec7t quan tr\u1ecdng v\u00ec nhi\u1ec1u doanh nghi\u1ec7p nh\u1ecf c\u00f3 th\u00f3i quen:<\/p>\n

IT Admin = Global Admin.<\/p>\n

Partner = Global Admin.<\/p>\n

Manager = Global Admin.<\/p>\n

User k\u1ef9 thu\u1eadt = Global Admin.<\/p>\n

Sau m\u1ed9t th\u1eddi gian, c\u00f3 qu\u00e1 nhi\u1ec1u account c\u00f3 quy\u1ec1n cao m\u00e0 kh\u00f4ng ai review.<\/p>\n

M\u1ed9t m\u00f4 h\u00ecnh t\u1ed1t h\u01a1n l\u00e0 ch\u1ec9 gi\u1eef m\u1ed9t s\u1ed1 l\u01b0\u1ee3ng r\u1ea5t nh\u1ecf Global Administrator v\u00e0 c\u1ea5p c\u00e1c role chuy\u00ean bi\u1ec7t cho c\u00e1c nhi\u1ec7m v\u1ee5 h\u1eb1ng ng\u00e0y.<\/p>\n

Break-glass account l\u00e0 g\u00ec?<\/h2>\n

M\u1ed9t tenant t\u1ed1t n\u00ean c\u00f3 account d\u00f9ng cho t\u00ecnh hu\u1ed1ng kh\u1ea9n c\u1ea5p. Microsoft khuy\u1ebfn ngh\u1ecb t\u1ed5 ch\u1ee9c c\u00f3 hai cloud-only emergency access accounts<\/strong>, \u0111\u01b0\u1ee3c g\u00e1n Global Administrator v\u00e0 ch\u1ec9 s\u1eed d\u1ee5ng cho t\u00ecnh hu\u1ed1ng break-glass khi c\u00e1c administrator th\u00f4ng th\u01b0\u1eddng kh\u00f4ng th\u1ec3 \u0111\u0103ng nh\u1eadp ho\u1eb7c v\u00f4 t\u00ecnh b\u1ecb kh\u00f3a.<\/p>\n

For example:<\/p>\n

Conditional Access b\u1ecb c\u1ea5u h\u00ecnh sai.<\/p>\n

MFA provider g\u1eb7p s\u1ef1 c\u1ed1.<\/p>\n

To\u00e0n b\u1ed9 admin account b\u1ecb block.<\/p>\n

Admin ch\u00ednh ngh\u1ec9 vi\u1ec7c \u0111\u1ed9t ng\u1ed9t.<\/p>\n

Trong nh\u1eefng t\u00ecnh hu\u1ed1ng n\u00e0y, emergency account gi\u00fap doanh nghi\u1ec7p l\u1ea5y l\u1ea1i quy\u1ec1n qu\u1ea3n tr\u1ecb.<\/p>\n

C\u00e1c account n\u00e0y kh\u00f4ng n\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho c\u00f4ng vi\u1ec7c h\u1eb1ng ng\u00e0y.<\/p>\n

Domain c\u00f3 ph\u1ea3i l\u00e0 tenant kh\u00f4ng?<\/h2>\n

Domain v\u00e0 tenant c\u00f3 li\u00ean quan nh\u01b0ng kh\u00f4ng gi\u1ed1ng nhau.<\/p>\n

Tenant l\u00e0 m\u00f4i tr\u01b0\u1eddng Microsoft 365.<\/p>\n

Domain l\u00e0 t\u00ean mi\u1ec1n doanh nghi\u1ec7p \u0111\u01b0\u1ee3c th\u00eam v\u00e0 x\u00e1c minh trong tenant.<\/p>\n

For example:<\/p>\n

Tenant c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c t\u1ea1o v\u1edbi domain m\u1eb7c \u0111\u1ecbnh:<\/p>\n

company.onmicrosoft.com<\/code><\/p>\n

Sau \u0111\u00f3 doanh nghi\u1ec7p th\u00eam custom domain:<\/p>\n

company.com<\/code><\/p>\n

Microsoft 365 admin center cho ph\u00e9p t\u1ed5 ch\u1ee9c qu\u1ea3n l\u00fd custom domain v\u00e0 DNS records trong tenant.<\/p>\n

M\u1ed9t tenant c\u00f3 th\u1ec3 c\u00f3 nhi\u1ec1u domain.<\/p>\n

For example:<\/p>\n

company.com<\/code><\/p>\n

company.vn<\/code><\/p>\n

brandA.com<\/code><\/p>\n

brandB.com<\/code><\/p>\n

Nh\u01b0ng t\u1ea5t c\u1ea3 v\u1eabn c\u00f3 th\u1ec3 n\u1eb1m trong c\u00f9ng m\u1ed9t Microsoft 365 tenant.<\/p>\n

Domain ownership c\u1ea7n \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n

Doanh nghi\u1ec7p n\u00ean gi\u1eef quy\u1ec1n truy c\u1eadp v\u00e0o registrar v\u00e0 DNS c\u1ee7a domain. Kh\u00f4ng n\u00ean \u0111\u1ec3 partner ho\u1eb7c m\u1ed9t c\u00e1 nh\u00e2n duy nh\u1ea5t n\u1eafm to\u00e0n b\u1ed9:<\/p>\n

Domain registrar account.<\/p>\n

DNS access.<\/p>\n

Microsoft 365 Global Admin.<\/p>\n

Billing.<\/p>\n

N\u1ebfu t\u1ea5t c\u1ea3 nh\u1eefng quy\u1ec1n n\u00e0y n\u1eb1m \u1edf m\u1ed9t ng\u01b0\u1eddi ho\u1eb7c m\u1ed9t vendor, r\u1ee7i ro operational dependency s\u1ebd r\u1ea5t cao.<\/p>\n

M\u1ed9t m\u00f4 h\u00ecnh t\u1ed1t l\u00e0 c\u00f3 ph\u00e2n t\u00e1ch:<\/p>\n

Business gi\u1eef ownership domain.<\/p>\n

IT gi\u1eef technical access.<\/p>\n

Partner \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n theo scope.<\/p>\n

User account n\u1eb1m \u1edf \u0111\u00e2u?<\/h2>\n

User account trong Microsoft 365 \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd trong Microsoft Entra tenant. Microsoft Entra tenant l\u00e0 n\u01a1i l\u01b0u user, group, device, application registration v\u00e0 access policy c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n

V\u00ed d\u1ee5 m\u1ed9t user:<\/p>\n

anh.truong@company.com<\/code><\/p>\n

c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 truy c\u1eadp:<\/p>\n

Outlook.<\/p>\n

Teams.<\/p>\n

OneDrive.<\/p>\n

SharePoint.<\/p>\n

Microsoft 365 Apps.<\/p>\n

Power BI.<\/p>\n

C\u00e1c \u1ee9ng d\u1ee5ng b\u00ean th\u1ee9 ba \u0111\u00e3 t\u00edch h\u1ee3p.<\/p>\n

V\u00ec v\u1eady, identity trong tenant tr\u1edf th\u00e0nh n\u1ec1n t\u1ea3ng cho g\u1ea7n nh\u01b0 to\u00e0n b\u1ed9 h\u1ec7 sinh th\u00e1i.<\/p>\n

Tenant c\u0169ng l\u00e0 boundary c\u1ee7a collaboration<\/h2>\n

T\u1eeb g\u00f3c nh\u00ecn Microsoft 365, tenant t\u1ea1o ra m\u1ed9t ranh gi\u1edbi c\u1ed9ng t\u00e1c m\u1eb7c \u0111\u1ecbnh.<\/p>\n

Ng\u01b0\u1eddi d\u00f9ng trong c\u00f9ng tenant c\u00f3 th\u1ec3 t\u00ecm th\u1ea5y nhau v\u00e0 c\u1ed9ng t\u00e1c d\u1ec5 d\u00e0ng h\u01a1n trong Teams, Outlook, SharePoint v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 Microsoft 365. Ng\u01b0\u1eddi d\u00f9ng thu\u1ed9c tenant kh\u00e1c th\u01b0\u1eddng c\u1ea7n external collaboration ho\u1eb7c guest access ph\u00f9 h\u1ee3p.<\/p>\n

\u0110i\u1ec1u n\u00e0y gi\u1ea3i th\u00edch t\u1ea1i sao vi\u1ec7c t\u1ea1o nhi\u1ec1u tenant kh\u00f4ng n\u00ean \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n t\u00f9y ti\u1ec7n.<\/p>\n

M\u1ed7i tenant b\u1ed5 sung th\u00eam m\u1ed9t boundary qu\u1ea3n tr\u1ecb m\u1edbi.<\/p>\n

User.<\/p>\n

Policy.<\/p>\n

Role.<\/p>\n

License.<\/p>\n

Guest.<\/p>\n

Security.<\/p>\n

\u0111\u1ec1u c\u00f3 th\u1ec3 ph\u1ea3i \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd ri\u00eang.<\/p>\n

M\u1ed9t doanh nghi\u1ec7p n\u00ean c\u00f3 bao nhi\u00eau tenant?<\/h2>\n

V\u1edbi ph\u1ea7n l\u1edbn doanh nghi\u1ec7p, m\u1ed9t tenant production l\u00e0 m\u00f4 h\u00ecnh \u0111\u01a1n gi\u1ea3n nh\u1ea5t.<\/p>\n

Microsoft hi\u1ec7n c\u0169ng xem single production tenant l\u00e0 l\u1ef1a ch\u1ecdn l\u00fd t\u01b0\u1edfng v\u1ec1 m\u1eb7t simplicity v\u00e0 user experience trong nhi\u1ec1u tr\u01b0\u1eddng h\u1ee3p. Multiple tenant ch\u1ec9 n\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng khi c\u00f3 y\u00eau c\u1ea7u k\u1ef9 thu\u1eadt, ph\u00e1p l\u00fd, b\u1ea3o m\u1eadt ho\u1eb7c c\u1ea5u tr\u00fac t\u1ed5 ch\u1ee9c th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft.<\/p>\n

V\u00ed d\u1ee5 c\u00f3 th\u1ec3 c\u1ea7n nhi\u1ec1u tenant khi:<\/p>\n

C\u00f3 M&A.<\/p>\n

C\u00f3 entity ho\u00e0n to\u00e0n \u0111\u1ed9c l\u1eadp.<\/p>\n

C\u00f3 y\u00eau c\u1ea7u isolation \u0111\u1eb7c bi\u1ec7t.<\/p>\n

C\u00f3 m\u00f4i tr\u01b0\u1eddng test ri\u00eang.<\/p>\n

C\u00f3 compliance boundary ri\u00eang.<\/p>\n

Nh\u01b0ng v\u1edbi SME, t\u1ea1o tenant ri\u00eang cho t\u1eebng department th\u01b0\u1eddng kh\u00f4ng ph\u1ea3i l\u1ef1a ch\u1ecdn t\u1ed1t.<\/p>\n

V\u00ec sao qu\u00e1 nhi\u1ec1u tenant g\u00e2y kh\u00f3 qu\u1ea3n tr\u1ecb?<\/h2>\n

M\u1ed7i tenant c\u00f3 th\u1ec3 c\u00f3:<\/p>\n

Admin roles ri\u00eang.<\/p>\n

MFA policy ri\u00eang.<\/p>\n

Conditional Access ri\u00eang.<\/p>\n

License ri\u00eang.<\/p>\n

Guest ri\u00eang.<\/p>\n

Group ri\u00eang.<\/p>\n

Security configuration ri\u00eang.<\/p>\n

Microsoft l\u01b0u \u00fd r\u1eb1ng nhi\u1ec1u tenant l\u00e0m t\u0103ng coordination overhead v\u00e0 nguy c\u01a1 configuration drift gi\u1eefa c\u00e1c m\u00f4i tr\u01b0\u1eddng.<\/p>\n

V\u00ed d\u1ee5 HR \u1edf Tenant A v\u00e0 Sales \u1edf Tenant B.<\/p>\n

Vi\u1ec7c collaboration s\u1ebd ph\u1ee9c t\u1ea1p h\u01a1n so v\u1edbi c\u00f9ng m\u1ed9t tenant.<\/p>\n

IT c\u0169ng ph\u1ea3i duy tr\u00ec nhi\u1ec1u c\u1ea5u h\u00ecnh.<\/p>\n

V\u00ec v\u1eady, kh\u00f4ng n\u00ean d\u00f9ng tenant nh\u01b0 m\u1ed9t c\u00e1ch \u201cchia ph\u00f2ng ban\u201d.<\/p>\n

License \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd trong tenant nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n

Subscription v\u00e0 license \u0111\u01b0\u1ee3c g\u1eafn v\u1edbi tenant. Sau khi doanh nghi\u1ec7p mua s\u1ea3n ph\u1ea9m Microsoft 365, license c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c g\u00e1n cho user tr\u1ef1c ti\u1ebfp ho\u1eb7c th\u00f4ng qua group, t\u00f9y c\u1ea5u h\u00ecnh. Microsoft c\u0169ng nh\u1ea5n m\u1ea1nh vi\u1ec7c qu\u1ea3n l\u00fd s\u1ed1 l\u01b0\u1ee3ng license ph\u00f9 h\u1ee3p v\u1edbi nhu c\u1ea7u hi\u1ec7n t\u1ea1i v\u00e0 k\u1ebf ho\u1ea1ch staffing l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a tenant management.<\/p>\n

V\u00ed d\u1ee5 tenant c\u00f3:<\/p>\n

20 Business Basic.<\/p>\n

30 Business Standard.<\/p>\n

10 Business Premium.<\/p>\n

IT Admin c\u00f3 th\u1ec3 ph\u00e2n b\u1ed5 license cho t\u1eebng nh\u00f3m ng\u01b0\u1eddi d\u00f9ng.<\/p>\n

Tenant v\u00ec v\u1eady c\u0169ng l\u00e0 boundary qu\u1ea3n l\u00fd subscription v\u00e0 entitlement.<\/p>\n

Tenant ownership kh\u00f4ng ch\u1ec9 l\u00e0 admin account<\/h2>\n

Ownership th\u1ef1c t\u1ebf g\u1ed3m nhi\u1ec1u l\u1edbp. M\u1ed9t tenant \u0111\u01b0\u1ee3c qu\u1ea3n tr\u1ecb t\u1ed1t n\u00ean x\u00e1c \u0111\u1ecbnh r\u00f5 ownership c\u1ee7a:<\/p>\n

Domain.<\/p>\n

Billing.<\/p>\n

Global Administrator.<\/p>\n

Security.<\/p>\n

Exchange.<\/p>\n

SharePoint.<\/p>\n

Teams.<\/p>\n

License.<\/p>\n

Device management.<\/p>\n

Backup\/retention strategy.<\/p>\n

Support relationship.<\/p>\n

N\u1ebfu ch\u1ec9 c\u00f3 m\u1ed9t account \u201cadmin@company.com<\/a>\u201d m\u00e0 kh\u00f4ng c\u00f3 governance r\u00f5, tenant v\u1eabn ch\u01b0a th\u1ef1c s\u1ef1 \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd t\u1ed1t.<\/p>\n

Admin role n\u00ean \u0111\u01b0\u1ee3c ph\u00e2n t\u00e1ch<\/h2>\n

Microsoft 365 c\u00f3 nhi\u1ec1u administrator role kh\u00e1c nhau. Thay v\u00ec m\u1ecdi admin \u0111\u1ec1u l\u00e0 Global Admin, doanh nghi\u1ec7p c\u00f3 th\u1ec3 ph\u00e2n vai theo tr\u00e1ch nhi\u1ec7m.<\/p>\n

For example:<\/p>\n

User Administrator.<\/p>\n

Exchange Administrator.<\/p>\n

SharePoint Administrator.<\/p>\n

Teams Administrator.<\/p>\n

Billing Administrator.<\/p>\n

Security Administrator.<\/p>\n

Microsoft hi\u1ec7n nh\u1ea5n m\u1ea1nh delegated administration v\u00e0 least-privilege role assignment nh\u01b0 m\u1ed9t ph\u1ea7n c\u1ee7a tenant foundation.<\/p>\n

\u0110i\u1ec1u n\u00e0y gi\u00fap gi\u1ea3m ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng n\u1ebfu m\u1ed9t account x\u1ea3y ra s\u1ef1 c\u1ed1.<\/p>\n

Admin account v\u00e0 user account n\u00ean t\u00e1ch kh\u00f4ng?<\/h2>\n

V\u1edbi ng\u01b0\u1eddi c\u00f3 quy\u1ec1n cao, n\u00ean c\u00e2n nh\u1eafc t\u00e1ch account qu\u1ea3n tr\u1ecb kh\u1ecfi account d\u00f9ng h\u1eb1ng ng\u00e0y.<\/p>\n

For example:<\/p>\n

anh.truong@company.com<\/code><\/p>\n

d\u00f9ng cho Outlook, Teams v\u00e0 c\u00f4ng vi\u1ec7c th\u00f4ng th\u01b0\u1eddng.<\/p>\n

adm-anh.truong@company.com<\/code><\/p>\n

d\u00f9ng cho admin task.<\/p>\n

C\u00e1ch n\u00e0y gi\u00fap gi\u1ea3m kh\u1ea3 n\u0103ng m\u1ed9t phishing email ho\u1eb7c session th\u00f4ng th\u01b0\u1eddng d\u1eabn tr\u1ef1c ti\u1ebfp \u0111\u1ebfn privileged access.<\/p>\n

\u0110\u00e2y l\u00e0 nguy\u00ean t\u1eafc ph\u1ed5 bi\u1ebfn trong privileged access management.<\/p>\n

Tenant c\u1ea7n c\u00f3 quy tr\u00ecnh Joiner \u2013 Mover \u2013 Leaver<\/h2>\n

Tenant governance kh\u00f4ng th\u1ec3 t\u00e1ch r\u1eddi user lifecycle.<\/p>\n

M\u1ed9t quy tr\u00ecnh t\u1ed1t c\u1ea7n x\u00e1c \u0111\u1ecbnh:<\/p>\n

Khi nh\u00e2n vi\u00ean v\u00e0o c\u00f4ng ty \u2192 ai t\u1ea1o account?<\/p>\n

Khi \u0111\u1ed5i ph\u00f2ng ban \u2192 ai c\u1eadp nh\u1eadt group v\u00e0 permission?<\/p>\n

Khi ngh\u1ec9 vi\u1ec7c \u2192 ai block sign-in?<\/p>\n

License x\u1eed l\u00fd th\u1ebf n\u00e0o?<\/p>\n

Mailbox x\u1eed l\u00fd th\u1ebf n\u00e0o?<\/p>\n

OneDrive x\u1eed l\u00fd th\u1ebf n\u00e0o?<\/p>\n

Group membership c\u00f3 \u0111\u01b0\u1ee3c thu h\u1ed3i kh\u00f4ng?<\/p>\n

Microsoft xem account lifecycle l\u00e0 m\u1ed9t trong c\u00e1c l\u0129nh v\u1ef1c quan tr\u1ecdng khi thi\u1ebft k\u1ebf tenant architecture.<\/p>\n

N\u1ebfu offboarding kh\u00f4ng r\u00f5, doanh nghi\u1ec7p c\u00f3 th\u1ec3 \u0111\u1ec3 l\u1ea1i orphaned access sau khi nh\u00e2n vi\u00ean ngh\u1ec9 vi\u1ec7c.<\/p>\n

M\u1ed9t t\u00ecnh hu\u1ed1ng th\u1ef1c t\u1ebf: Partner t\u1ea1o tenant thay doanh nghi\u1ec7p<\/h2>\n

Gi\u1ea3 s\u1eed doanh nghi\u1ec7p mua Microsoft 365 qua m\u1ed9t partner.<\/p>\n

Partner t\u1ea1o tenant.<\/p>\n

Partner gi\u1eef Global Admin.<\/p>\n

Doanh nghi\u1ec7p ch\u1ec9 \u0111\u01b0\u1ee3c c\u1ea5p user account.<\/p>\n

M\u00f4 h\u00ecnh n\u00e0y c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng ban \u0111\u1ea7u, nh\u01b0ng c\u00f3 r\u1ee7i ro.<\/p>\n

N\u1ebfu sau n\u00e0y doanh nghi\u1ec7p \u0111\u1ed5i partner, h\u1ecd c\u00f3 th\u1ec3 g\u1eb7p kh\u00f3 kh\u0103n trong vi\u1ec7c x\u00e1c \u0111\u1ecbnh quy\u1ec1n qu\u1ea3n tr\u1ecb, domain, billing v\u00e0 ownership.<\/p>\n

C\u00e1ch t\u1ed1t h\u01a1n l\u00e0 ngay t\u1eeb \u0111\u1ea7u x\u00e1c \u0111\u1ecbnh:<\/p>\n

Tenant thu\u1ed9c doanh nghi\u1ec7p.<\/p>\n

Business c\u00f3 \u00edt nh\u1ea5t c\u00e1c admin account c\u1ea7n thi\u1ebft.<\/p>\n

Partner \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n h\u1ed7 tr\u1ee3 ph\u00f9 h\u1ee3p.<\/p>\n

M\u1ecdi quy\u1ec1n ph\u1ea3i c\u00f3 th\u1ec3 thu h\u1ed3i khi h\u1ee3p \u0111\u1ed3ng k\u1ebft th\u00fac.<\/p>\n

M\u1ed9t t\u00ecnh hu\u1ed1ng kh\u00e1c: Admin ngh\u1ec9 vi\u1ec7c<\/h2>\n

M\u1ed9t c\u00f4ng ty c\u00f3 duy nh\u1ea5t m\u1ed9t Global Administrator.<\/p>\n

Ng\u01b0\u1eddi \u0111\u00f3 ngh\u1ec9 vi\u1ec7c v\u00e0 kh\u00f4ng b\u00e0n giao.<\/p>\n

N\u1ebfu kh\u00f4ng c\u00f3 secondary admin ho\u1eb7c break-glass account, doanh nghi\u1ec7p c\u00f3 th\u1ec3 g\u1eb7p kh\u00f3 kh\u0103n trong vi\u1ec7c ti\u1ebfp qu\u1ea3n tenant.<\/p>\n

\u0110\u00e2y l\u00e0 l\u00fd do ownership kh\u00f4ng n\u00ean ph\u1ee5 thu\u1ed9c v\u00e0o m\u1ed9t c\u00e1 nh\u00e2n.<\/p>\n

Tenant ph\u1ea3i \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd nh\u01b0 m\u1ed9t t\u00e0i s\u1ea3n doanh nghi\u1ec7p.<\/p>\n

Tenant c\u0169ng c\u1ea7n inventory<\/h2>\n

IT Manager n\u00ean c\u00f3 m\u1ed9t h\u1ed3 s\u01a1 c\u01a1 b\u1ea3n v\u1ec1 tenant.<\/p>\n

For example:<\/p>\n

Tenant name.<\/p>\n

Tenant ID.<\/p>\n

Primary domain.<\/p>\n

Admin accounts.<\/p>\n

Emergency accounts.<\/p>\n

Subscriptions.<\/p>\n

License count.<\/p>\n

Partner relationship.<\/p>\n

Billing owner.<\/p>\n

Security contact.<\/p>\n

Support contact.<\/p>\n

Microsoft hi\u1ec7n c\u0169ng xem organizational profile, subscription, user, license, group v\u00e0 custom domain l\u00e0 c\u00e1c th\u00e0nh ph\u1ea7n n\u1ec1n t\u1ea3ng trong c\u1ea5u h\u00ecnh tenant.<\/p>\n

M\u1ed9t inventory nh\u01b0 v\u1eady r\u1ea5t h\u1eefu \u00edch khi audit ho\u1eb7c b\u00e0n giao.<\/p>\n

L\u1ed7i th\u01b0\u1eddng g\u1eb7p: qu\u00e1 nhi\u1ec1u Global Administrator<\/h2>\n

\u0110\u00e2y l\u00e0 l\u1ed7i kh\u00e1 ph\u1ed5 bi\u1ebfn. M\u1ed7i khi ai \u0111\u00f3 c\u1ea7n h\u1ed7 tr\u1ee3 m\u1ed9t vi\u1ec7c nh\u1ecf, IT c\u1ea5p Global Admin.<\/p>\n

Sau v\u00e0i n\u0103m, nhi\u1ec1u ng\u01b0\u1eddi v\u1eabn gi\u1eef quy\u1ec1n. Microsoft khuy\u1ebfn ngh\u1ecb Global Administrator n\u00ean \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n d\u01b0\u1edbi 5 v\u00e0 \u00e1p d\u1ee5ng least privilege. Doanh nghi\u1ec7p n\u00ean review privileged roles \u0111\u1ecbnh k\u1ef3.<\/p>\n

L\u1ed7i th\u01b0\u1eddng g\u1eb7p: partner gi\u1eef quy\u1ec1n nh\u01b0ng kh\u00f4ng c\u00f3 review<\/h2>\n

Partner c\u00f3 th\u1ec3 c\u1ea7n quy\u1ec1n.<\/p>\n

Nh\u01b0ng quy\u1ec1n n\u00e0y n\u00ean \u0111\u01b0\u1ee3c review.<\/p>\n

Khi project k\u1ebft th\u00fac ho\u1eb7c scope thay \u0111\u1ed5i, quy\u1ec1n c\u0169ng c\u1ea7n \u0111i\u1ec1u ch\u1ec9nh.<\/p>\n

Kh\u00f4ng n\u00ean c\u00f3 partner c\u0169 v\u1eabn gi\u1eef administrator access nhi\u1ec1u th\u00e1ng sau khi h\u1ee3p \u0111\u1ed3ng k\u1ebft th\u00fac.<\/p>\n

L\u1ed7i th\u01b0\u1eddng g\u1eb7p: kh\u00f4ng c\u00f3 emergency account<\/h2>\n

N\u1ebfu Conditional Access b\u1ecb c\u1ea5u h\u00ecnh sai, admin c\u00f3 th\u1ec3 t\u1ef1 kh\u00f3a ch\u00ednh m\u00ecnh.<\/p>\n

Hai emergency access account gi\u00fap gi\u1ea3m r\u1ee7i ro n\u00e0y.<\/p>\n

Microsoft khuy\u1ebfn ngh\u1ecb c\u00e1c account n\u00e0y l\u00e0 cloud-only, kh\u00f4ng g\u1eafn v\u1edbi m\u1ed9t ng\u01b0\u1eddi c\u1ee5 th\u1ec3 v\u00e0 ch\u1ec9 d\u00f9ng trong t\u00ecnh hu\u1ed1ng kh\u1ea9n c\u1ea5p.<\/p>\n

L\u1ed7i th\u01b0\u1eddng g\u1eb7p: tenant \u0111\u01b0\u1ee3c t\u1ea1o b\u1eb1ng th\u00f4ng tin c\u00e1 nh\u00e2n<\/h2>\n

V\u00ed d\u1ee5 tenant \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd b\u1eb1ng:<\/p>\n

Email c\u00e1 nh\u00e2n.<\/p>\n

S\u1ed1 \u0111i\u1ec7n tho\u1ea1i c\u00e1 nh\u00e2n.<\/p>\n

Th\u1ebb thanh to\u00e1n c\u00e1 nh\u00e2n.<\/p>\n

Technical contact c\u1ee7a nh\u00e2n vi\u00ean c\u0169.<\/p>\n

Nh\u1eefng th\u00f4ng tin n\u00e0y n\u00ean \u0111\u01b0\u1ee3c thay b\u1eb1ng th\u00f4ng tin thu\u1ed9c doanh nghi\u1ec7p.<\/p>\n

Microsoft cho ph\u00e9p thay \u0111\u1ed5i technical contact v\u00e0 organizational information trong tenant.<\/p>\n

Checklist qu\u1ea3n tr\u1ecb Microsoft 365 tenant<\/h2>\n

Tr\u01b0\u1edbc khi xem tenant l\u00e0 \u201c\u0111\u00e3 \u1ed5n\u201d, IT Manager n\u00ean ki\u1ec3m tra:<\/p>\n