Skip to content
Tenvara is coming soon. Get early access
Beta

Compare: Microsoft 365 management

CIPP alternative: Tenvara

CIPP (CyberDrain Improved Partner Portal) is an open source portal that many MSPs use to manage their customers' Microsoft 365 tenants from one screen, either self-hosted in their own Azure or hosted by CyberDrain. Tenvara does the everyday tenant work too, next to your tickets, devices, licence billing and backup, so a user change, a leaver or a failing check sits with the rest of the customer.

Get early access See the comparison
Tenvara: Microsoft 365 management

The tool today

What CIPP does

Open source portal for managing customers' Microsoft 365 tenants, self-hosted or hosted. Made by CyberDrain. This is how the vendor describes it, in our words.

  • Central user management: add, edit and delete users, mailbox and calendar permissions.
  • An offboarding wizard that runs leaver actions now or on a scheduled date.
  • Standards that check tenant settings every twelve hours and report, alert or remediate.
  • Intune management: apps, Autopilot, and configuration, compliance and app protection policies.
  • GDAP management, Conditional Access deployment and multi-tenant reporting.
  • Open source, free to self-host in your own Azure, or hosted by CyberDrain.

Side by side

Tenvara vs CIPP

The Microsoft 365 management jobs that matter most, and how each product handles them. Then what else comes with Tenvara, such as a service desk, RMM and Microsoft 365 backup, in the same app.

User and group changes across tenants

Tenvara Yes

Preview, approval for risky changes, and undo Guide

CIPP Yes

Central user and group management

Mailbox management

Tenvara Yes

Calendar, send on behalf, archive, shared and room mailboxes Guide

CIPP Yes

Permissions, archives, shared, room and equipment mailboxes

Guest accounts

Tenvara Yes

Guests listed and managed in every tenant Guide

CIPP Yes

Guest list with re-invite, block and delete

Message trace and quarantine

Tenvara Yes

Message trace, quarantine and allow and block lists Guide

CIPP Yes

Message trace, quarantine and tenant allow and block lists

Bulk user changes and CSV import

Tenvara Yes

Bulk changes, and new users from a CSV file Guide

CIPP Yes

Bulk Add Users from a CSV file

Scheduled changes

Tenvara Yes

Run a change later, or for a set time only Guide

CIPP Yes

Scheduler and scheduled user creation

Scheduled leavers

Tenvara Yes

Ordered steps, run now or at a set time Guide

CIPP Yes

Offboarding wizard, now or scheduled

Conditional Access policies

Tenvara Yes

Templates deployed report-only, then enforced Guide

CIPP Yes

Conditional Access deployment at scale

SPF, DKIM and DMARC checks

Tenvara Yes

Hourly checks, DNS records and a DMARC ramp Guide

CIPP Yes

Domains analyser

Licence billing against your distributor

Tenvara Yes

Pax8 and Partner Center reconciled to contracts Guide

CIPP Partly

Licence report per tenant

Self-hosting

Tenvara Yes

Docker Compose on your own Linux server Guide

CIPP Yes

Deploys into your own Azure subscription

Tenant security baseline

Tenvara Yes

Scored security checks, plus your own baselines with drift Guide

CIPP Yes

150+ standards across Entra, Exchange, Intune and more

Automatic remediation on a schedule

Tenvara Yes

Drift from your baselines fixed automatically Guide

CIPP Yes

Standards in remediate mode, every twelve hours

Intune apps, Autopilot and policies

Tenvara Yes

Profiles, apps and Autopilot, with Intune consent Guide

CIPP Yes

Apps, Autopilot and policy templates

OpenIntuneBaseline import

Tenvara Yes

Imported as templates, releases compared policy by policy Guide

CIPP Yes

Open Intune Baseline in the Template Library

App registration health check

Tenvara Yes

Permissions and consent checked, with Fix it for me Guide

CIPP Yes

Permissions Check, with repair

Copilot and AI readiness

Tenvara Yes

Score, data exposure fixes, Copilot licences and a report Guide

CIPP Yes

Copilot Readiness tests for licensing and app usage

Enterprise apps and switching an app off

Tenvara Yes

One inventory across tenants, kill switch for every tenant Guide

CIPP Yes

Enterprise apps per tenant, with disable and delete

Conditional Access What if

Tenvara Yes

Every policy checked for one person, with Microsoft's answer Guide

CIPP Yes

Sign-in Situations through Microsoft's What If

Also in Tenvara

What else you get with Tenvara, in the same app

PSA and service desk

Tenvara Yes

Tickets, SLAs, time and contracts on the same customer record Guide

CIPP No

Not included; raises tickets in HaloPSA

Remote monitoring and alerts

Tenvara Yes

Device health, checks and alerts by policy, on one agent Guide

CIPP No

Not included; syncs tenant and device data into NinjaOne

Microsoft 365 backup

Tenvara Yes

Mail, OneDrive, SharePoint and Teams backed up and restored Guide

CIPP No

Not included; backs up tenant configuration only

Endpoint, server and VM backup

Tenvara Yes

Image, folder and Hyper-V or Proxmox VM backups Guide

CIPP No

Not included

Remote access

Tenvara Yes

Control a device's screen from the browser, with every session logged Guide

CIPP No

Not included

IT documentation

Tenvara Yes

Customer records and knowledge base articles, linked to devices Guide

CIPP No

Not included; syncs Microsoft 365 data into Hudu

Security awareness training

Tenvara Yes

Phishing simulations, lessons, quizzes and policy acceptance Guide

CIPP No

Not included

Hybrid Active Directory

Tenvara Yes

Synced users reset, unlocked and changed on the customer's domain controller through the agent Guide

CIPP No

Not part of CIPP; works with cloud tenants through Microsoft Graph

Compliance programmes

Tenvara Yes

ISO 27001, ISO 9001, UK GDPR and Cyber Essentials programmes with policies, risks and evidence Guide

CIPP No

Not included

Add-on means the vendor sells it as a separate product or paid extra. CIPP details come from the vendor's own website, see sources.

The one-app pitch

What else you'd replace

Most MSPs running CIPP pay for several other tools beside it. Tenvara does these jobs too, on the same customer record, with one agent and one login.

See every comparison

Switching

Moving from CIPP

A calm move, not a big bang. Run both side by side until your team is happy.

How a gradual move to Tenvara works
  1. 1

    Register the app and connect tenants

    Tenvara uses one multi-tenant app of its own. Connect each customer with an admin consent link, or straight from your GDAP relationships without sending a link.

    Connecting a tenant
  2. 2

    Review the findings

    After the first sync every tenant is checked. Compare the results with your CIPP standards and accept the risks you have agreed with customers, with a reason and an end date.

    Security findings
  3. 3

    Set up starter and leaver templates

    Recreate your usual licences, groups and leaver steps as templates for every tenant, one customer's tenants or a single tenant.

    Starters and leavers
  4. 4

    Run both side by side, then switch

    Move everyday user work across customer by customer once your team is comfortable with how Tenvara handles it.

CIPP pricing

CIPP publishes its prices on its website. Check its pricing page for current prices and terms.

Vendor pricing page

Tenvara pricing

One product with every feature included, hosted or self-hosted. Tenvara is new and in beta, and pricing is announced before launch.

See pricing

Questions

CIPP vs Tenvara: FAQ

Register one multi-tenant app in your own Entra tenant, then connect each customer with an admin consent link, or pick them straight from your GDAP relationships.

Most can. Every change is logged with what was there before, and blocking sign-in, licences, groups, forwarding and even a deleted user can be put back from the change log.

Security checks after every sync, with a posture score and mappings to CIS, NIST, SCuBA and the Essential Eight, plus hourly SPF, DKIM, DMARC, MTA-STS and TLS reporting checks on every customer domain.

Each tenant belongs to a customer, so its users, findings and licences show beside that customer's tickets, devices, contracts and backups, and licence changes flow into billing.

More Microsoft 365 management comparisons

Tenvara vs Augmentt Microsoft 365 security, user management and Intune modules for MSPs, sold per seat. Compare Tenvara vs Inforcer Microsoft 365 policy baselines, drift alerts and policy backup across every customer tenant. Compare Tenvara vs Microsoft 365 Lighthouse Microsoft's free multi-tenant portal for CSP partners to secure and manage customer tenants. Compare

Tenvara is coming soon.

Apply for the beta to run Tenvara side by side with CIPP before you decide, or get launch updates and hear first when pricing is announced.

Get early access All comparisons

Comparison based on publicly available information as of September 2026. CIPP is a trademark of its owner; Tenvara is not affiliated with it. Spotted something out of date? Tell us and we'll correct it.

Sources