Azure Helper read-only
./how-it-works ./pricing ./architecture Launch app →
PS visitor@web:~/AzureHelper>Get-Pitch
an AI guide for Azure & Microsoft 365

Learn Azure
& M365 by doing it
in your own tenant.

Ask practical Azure and Microsoft 365 admin questions. Azure Helper reads your tenant for live context where it has permission, then teaches the workflow three ways — Portal, Microsoft Graph, and PowerShell. It's read-only: it explains the steps, you run any change yourself.

Supports Entra ID and Entra External ID tenants. Inspect, explain, and export any Microsoft Graph query or captured portal call; in-app execution stays read-only and catalog-guarded.

Launch the app See how it's wired
3
ways · guided steps
0
write permissions
53
approved Graph reads
Azure Helper — guide
you
How do I check that all admins have MFA?
Helper coach○ safe read
Get-MgIdentityConditionalAccessPolicy |
  Where "GrantControls.mfa"
✓ 9 / 11 admins covered · 2 gaps found
▸ shown to you as Portal · Graph · PowerShell
the gap

Docs are generic. Copilot does it for you. Neither teaches you in your tenant.

Generic docs

Microsoft Learn shows a screenshot from someone else's tenant. You still have to translate it to yours.

Agents that act

Copilot-style agents make the change and move on. Convenient — but you learn nothing, and they touch production.

Azure Helper

Reads your real tenant for the example, then teaches the exact steps three ways. You stay in control; you get fluent.

one ask, three ways

Whatever your comfort zone, the Helper meets you there.

Guided workflows show the Portal path, Microsoft Graph read, and PowerShell equivalent when that form is available.

Step · Assign a Microsoft 365 E5 license
entra.microsoft.com
  1. Identity -> Users -> All users -> Mr. Cloudpartner
  2. Licenses → + Assignments
  3. Tick Microsoft 365 E5 → Review + assign
POST https://graph.microsoft.com/v1.0/users/{id}/assignLicense { "addLicenses": [{ "skuId": "06ebc4ee…e06" }], "removeLicenses": [] }
Set-MgUserLicense -UserId $user.Id ` -AddLicenses @{ SkuId = "06ebc4ee…e06" } ` -RemoveLicenses @()
Learn: licensing / SKU Pro tip: use group-based licensing
safe by construction

Read-only by design — not by policy.

Azure Helper requests only .Read Graph scopes. There is no code path, token, or permission that lets it create, update, or delete anything in your tenant. Changes are taught, never performed.

  • Explicit read-only Graph permissions with an in-app setup health check
  • No rollback, audit-of-writes, or blast-radius liability
  • Hosted app first, with browser side panels and a DevTools capture workbench for portal calls
Read the architecture →
read permissions by feature
Organization / User / Group / Domain .Readbaseline
Policy.Read.AllCA + auth
RoleManagement.Read.Directoryroles
AuditLog.Read.Allsign-ins
Application.Read.Allapps
More .Read scopes as you enable modulessetup health
never requested
User.ReadWrite.All Group.ReadWrite.All Directory.ReadWrite.All
built to make you fluent

More than a how-to. A learning system.

teach-as-you-go

Every step explains itself

A plain-language note, a pro-tip, and the concept behind each action — right where you are.

guided paths

Structured curricula

Entra Essentials, Conditional Access 101, Graph for Admins — with progress tracking.

graph explorer

See the calls

Run approved read-only Graph queries, discover metadata, capture portal network calls in DevTools, and export them as REST, PowerShell, CLI, or JavaScript snippets.

deep dives

Blogs and study guides

learn.cloudpartner.fi is the reading shelf: short blogs, field notes, and study guides behind the lessons.

cert grind mode

Practice for Microsoft certs

academy.cloudpartner.fi turns exam objectives into hands-on reps for SC, AZ, and M365 admins.

PS visitor@web:~/Pricing>Get-Plans | Sort-Object Price

Pick your tenant lane.

Read-only Azure and Microsoft 365 guidance for admins and partners who want to understand real tenants faster.

Launch plan
Azure Helper Pro
€19 /mo
one admin · one connected tenant

Everything needed to explore, learn, and explain your real Entra ID or External ID environment without write access.

Connect one tenant
Guide and explain your real environment
Explore approved Microsoft Graph queries and explain/export any pasted or captured query
Learn with practical admin walkthroughs
Use the browser side panel and DevTools capture workbench
Launch app
Partner plan
Azure Helper Partner
€39 /mo
one admin · multiple connected tenants

Built for consultants and MSP-style work: switch between Entra ID and External ID customer tenants while keeping every read scoped to the selected tenant.

Connect multiple customer tenants
Auto-discover every tenant you already have member or guest access to — same as the Azure Portal directory switcher
Clear active-tenant switcher in the app bar, with one-click "Connect" for newly discovered tenants
Per-tenant consent and permission visibility, with a guided "Grant data access" flow
Tenant snapshots stay isolated by tenant ID
Same read-only Graph, Azure, Guide, and Learn flows
Launch partner workspace
Not ready to subscribe yet? Get notified about new features and plans.
Sign in, then subscribe to Pro or Partner with secure Stripe checkout.

Stop guessing. Start knowing.

Connect read-only, confirm setup health, and ask your first tenant-backed question.

Launch Azure Helper →
about

Azure Helper is a read-only AI guide for Microsoft Entra, M365 and Azure — it teaches you to run your own tenant, three ways, without ever touching it.

product
./launch-app ./pricing ./architecture
learn
./learn.cloudpartner.fi ./academy.cloudpartner.fi ./graph
legal
./support ./privacy-policy ./terms-of-service
© 2026 Azure Helper · Not affiliated with Microsoft.