TerraProvider automates policy configurations across your Microsoft 365 tenants so you can keep them consistent and auditable. M365 settings are managed as Terraform configuration file in a version control system and applied to each tenant via Microsoft's Graph API. This approach helps you ensure maximum control over your tenant configuration.
If you have multiple tenants in your environment, you can easily keep all tenants in sync, simplify compliance audits, and help ensure that all tenants are using best practices. The ability to quickly set up a new tenant based on existing policies also helps with disaster recovery - a component often overlooked by backup software.
Tu
24
Feb
Experts Live Denmark
Meet us at Denmark's largest Microsoft Community-driven conference.
Tu
05
May
European Collaboration Summit
The top conference for Modern Work, Microsoft 365, and Copilot.
Sa
09
May
Workplace Ninja Germany 2026
Hands-on Microsoft Modern Workplace expertise straight from the community
Configuration as Code for Microsoft 365 Policy Management
Define Microsoft 365 configurations as code
Manually configuring M365 configurations is very time-consuming and error-prone. TerraProvider enables you to define all configurations as code that is version controlled so that you can fork, audit, and roll-back any changes to Microsoft 365 configurations with ease, helping operationalize and scale your configuration management.
Always supports the latest M365 features
TerraProvider instruments Microsoft’s Graph API as a provider for Terraform and OpenTofu. Rather than coding the provider manually, the code is auto-generated based on Microsoft’s specifications. That means your provider will always be ready to manage latest updates in M365 configuration policies.
Change management for conditional access policies
Conditional access rules secure the front door for your enterprise and are critical for creating a zero-trust environment. Manually configuration poses risks for compliance and security alike. TerraProvider aligns conditional access rules with internal policies and provides a clean approval process and audit trail through the version history of the configuration code.
Ensure uniform configurations across development, testing and production environments
Configuring policies manually across environments is time-consuming and error-prone. Test results become unreliable, causing you to chase unexpected bugs. Differences in user roles and permissions between environments can expose sensitive data or functionality inadvertently. TerraProvider keeps all environments in identical states and simplifies change management.
Keep M365 configuration policies consistent across tenants
Multi-tenant management and consistency is challenging when you are doing all configurations manually. With TerraProvider, you have peace of mind that you’re following your best practice everywhere. And when you need to make a change, it’s easy to roll out updates across all tenants – no matter whether you’re managing tenants by region and organization.
Disaster recovery of tenant configurations
Backup solutions focus on files and databases but miss tenant configurations. TerraProvider helps you recover from a disaster with all of your configurations intact. It’s the final piece of the puzzle for your disaster recovery plan.
Easily clone tenant configurations to code
Copying all of your configurations into code by hand is tedious. TerraProvider helps you clone your golden-image tenant to code, so you can audit, update and deploy it across all of your tenants. Your versioned configuration cleanly documents your best practices.
Manage your Microsoft 365 Configurations as Code
No credit card or sales call required
Get the FREE Community Edition
- Free for your company with up to 100 users
- Great for test labs and small environments
Benefits of the Enterprise Edition
- SLA-based support service
- For environments with more than 100 users
- Great for enterprises and MSPs
Specifications
Supported Platforms
- Provider is compatible with both Terraform and OpenTofu
- Configurations are stored as code in GitHub or other version control systems
Supported M365 Settings
- Deploy Configurations, Filters, Compliance, and Conditional Access Policies in Intune and Entra ID for all platforms including Windows, MacOS and Mobile
Full Service
- Incident support
- All updates included
Architecture
Terraform + GitHub = Configuration as Code for Microsoft 365
Application Lifecycle & Management Automation Platform RealmJoin
If you’re managing multiple Microsoft 365 tenants, you’ll love RealmJoin, the cloud-born companion to Microsoft Intune. It's the missing piece to achieve an enterprise-ready client management platform. RealmJoin makes it easier to deploy nearly 2,000 pre-packaged standard applications for Intune with higher quality - a modern package factory for custom applications and additional features such as LAPS, remote support, and Runbook automation.
