More than a faster admin centre.
Admin tools help one person click faster. Leysa gives your whole team a shared, controlled way to make changes, with the right checks built in.
Approvals before anything runs
Sensitive jobs wait for a second pair of eyes. Nothing touches your tenant until an admin says yes.
Scheduled, in your time zone
Set a start date or an end date and walk away. Access starts and stops automatically, even when nobody's at a desk.
A record of every change
Who asked, who approved and what happened, step by step. Export the full history to a spreadsheet when the auditors ask.
Ready-made. Nothing to build.
Every automation comes prebuilt and tested against Microsoft 365. No flows to design, no PowerShell to maintain. Fill in a guided form and Leysa does the rest, checking each step as it goes.
People
- Onboard employee
- Offboard employee
- Update profile
- Guest users
- Contractor access
- Restore access
- Shared mailboxes
- Mailbox permissions
- Email forwarding
- Out of office
- Email aliases
- Rooms and resources
Security
- Reset password
- Reset MFA
Licensing
- Assign licences
- Licence usage
Groups
- Group membership
- Distribution lists
- Microsoft 365 groups
Teams
- Create channels
- Team membership
Reporting
- Inactive users
- Sign-in activity
- Mailbox usage
- User activity
- Service health
- Audit log export
Or just ask
Describe what you need in your own words and Ask Leysa takes you through the automation.
Offboarded the wrong person? Undo it.
Restore Access turns sign-in back on and puts back the licences, groups and manager that an offboarding or contractor expiry removed.
Three steps to your first automation.
Connect Microsoft 365
Your Microsoft 365 admin approves Leysa's access on Microsoft's standard consent screen. Nothing to install.
Invite your team
Give each person the role they need, admin or operator, so the right people approve the right things.
Run your first automation
Pick a job, fill in the form, and watch every step complete, with the result saved to your activity log.
Built to pass your own review.
Leysa holds admin access to your tenant, so we designed it the way you'd want it designed.
Certificate-based connection
Leysa authenticates to Microsoft with a certificate, not a shared secret that can leak or be copied.
Least privilege
Only the permissions and admin roles the automations need. Microsoft's consent screen shows you every one before you approve.
Passwords nobody sees
New and reset passwords go out as one-time links that self-destruct after a single view. Not even the admin who ran it sees them.
You stay in control
Access is granted in your own tenant, and you can revoke it from Microsoft Entra at any time.
Questions IT teams ask.
What access does Leysa need to our Microsoft 365?
Your Microsoft 365 admin approves Leysa on Microsoft's own consent screen, which lists every permission: reading your directory, and managing users, groups, licences, mailboxes and Teams. Mail and password tasks also need two admin roles, Exchange Administrator and Authentication Administrator, which Leysa can set up for you in one click. It never asks for Global Administrator, and it refuses to change any account that holds an admin role.
Do we need to install anything?
No. Leysa runs in your browser and works through Microsoft's own interfaces. There's no agent, no server and no PowerShell to maintain.
Where is our data stored?
Leysa's database and servers are in Sydney, Australia. The changes themselves happen in your own Microsoft 365 tenant, wherever it's hosted.
Who on our team can do what?
Everyone gets a role: Owner, Admin or Operator. You choose which automations wait for an admin's approval before they run, and every change is recorded in Activity with who asked, who approved and what happened.
Can we undo a change?
Offboarding and contractor expiry can be undone with Restore Access, which turns sign-in back on and puts back the licences, groups and manager that were removed. Every automation also shows exactly what it will do before you run it.
What happens when the free trial ends?
Once you're invited, the trial lasts 14 days from when you create your workspace, and needs no card. During early access, plans aren't sold online yet, so email us before it ends if you'd like to keep going. Otherwise everyone can still sign in but automations pause, and your workspace is kept for 30 days in case you come back, then deleted.
Can we remove Leysa later?
Yes. Deleting your workspace in Settings removes everything Leysa holds straight away. A Global Administrator can then delete the Leysa app in Microsoft Entra, which removes its access to your tenant.
Stop doing it by hand.
Free trials are starting soon. Tell us about your team and we'll email you as soon as they open.