Compare: Microsoft 365 management
CIPP alternative: Tenvara
CIPP (CyberDrain Improved Partner Portal) is an open source portal that many MSPs use to manage their customers' Microsoft 365 tenants from one screen, either self-hosted in their own Azure or hosted by CyberDrain. Tenvara does the everyday tenant work too, but next to your tickets, devices, licence billing and backup, so a user change, a leaver or a failing check sits with the rest of the customer. If Intune management or automatic standards are central to how you work, CIPP still covers ground Tenvara does not.
The tool today
What CIPP does
Open source portal for managing customers' Microsoft 365 tenants, self-hosted or hosted. Made by CyberDrain. This is how the vendor describes it, in our words.
- Central user management: add, edit and delete users, mailbox and calendar permissions.
- An offboarding wizard that runs leaver actions now or on a scheduled date.
- Standards that check tenant settings every twelve hours and report, alert or remediate.
- Intune management: apps, Autopilot, and configuration, compliance and app protection policies.
- GDAP management, Conditional Access deployment and multi-tenant reporting.
- Open source, free to self-host in your own Azure, or hosted by CyberDrain.
Side by side
Tenvara vs CIPP
The Microsoft 365 management jobs that matter most, and how each product handles them.
User, group and mailbox changes across tenants
Central user and mailbox permission management
Scheduled leavers
Offboarding wizard, now or scheduled
Conditional Access policies
Conditional Access deployment at scale
SPF, DKIM and DMARC checks
Domains analyser
Licence billing against your distributor
Licence report per tenant
Tickets, devices and backup in the same app
Focused on Microsoft 365 and Azure
Self-hosting
Deploys into your own Azure subscription
Add-on means the vendor sells it as a separate product or paid extra. CIPP details come from the vendor's own website, see sources.
The one-app pitch
What else you'd replace
Most MSPs running CIPP pay for several other tools beside it. Tenvara does these jobs too, on the same customer record, with one agent and one login.
See every comparisonSwitching
Moving from CIPP
A calm move, not a big bang. Run both side by side until your team is happy.
-
1
Register the app and connect tenants
Tenvara uses one multi-tenant app of its own. Connect each customer with an admin consent link, or straight from your GDAP relationships without sending a link.
Connecting a tenant -
2
Review the findings
After the first sync every tenant is checked. Compare the results with your CIPP standards and accept the risks you have agreed with customers, with a reason and an end date.
Security findings -
3
Set up starter and leaver templates
There is no import from CIPP, so recreate your usual licences, groups and leaver steps as templates for every tenant, a customer or one tenant.
Starters and leavers -
4
Run both side by side, then switch
Keep CIPP for anything Tenvara does not do, such as Intune, and move everyday user work across once your team is comfortable.
CIPP pricing
CIPP publishes its prices on its website. Check its pricing page for current prices and terms.
Vendor pricing pageTenvara pricing
One subscription, per technician or per endpoint, hosted or self-hosted, with every feature in every plan.
See pricingQuestions
CIPP vs Tenvara: FAQ
Most can. Every change is logged with what was there before, and blocking sign-in, licences, groups, forwarding and even a deleted user can be put back from the change log.
More Microsoft 365 management comparisons
See Tenvara next to CIPP.
A 30 minute walkthrough of the real product. Bring your list of what you use today and we'll show you where each part lives in Tenvara, and where it doesn't.
Comparison based on publicly available information as of September 2026. CIPP is a trademark of its owner; Tenvara is not affiliated with it. Spotted something out of date? Tell us and we'll correct it.
Sources