Stratos CommandDocs
Requirements

Access, configuration and technical requirements

What your organization needs in place for Stratos — subscription and seats, key contact, Microsoft 365 tenant access and admin consent, email delivery, and browsers.

Checklist

  • An active Pro subscription with enough seats for everyone who needs support.
  • A key contact with a name, email and phone number (needed to submit onboarding).
  • A Global Administrator for your Microsoft 365 tenant who can grant admin consent.
  • Your mail system accepts email from Stratos (invitations and sign-in links).
  • Everyone uses a supported browser.

Your Stratos onboarding contact can tell you which of these are still outstanding for your organization.

Subscription and seats

Managed support requires a Pro subscription. Each member and each pending invitation uses one seat. Owners and Admins manage seats under Settings → Billing. See Workspace readiness → Seats.

Key contact

Your key contact is the person Stratos Support works with during onboarding and contacts about your account. They become your workspace Owner. Their name, email and phone number are required before you can submit for provisioning. You can update them later under Settings → Key contact.

Microsoft 365 tenant access

To set up and support your tenant, and to show usage reports, Stratos connects to your Microsoft 365 tenant through a Microsoft Entra app registration. It uses Microsoft Graph application permissions, so it doesn't sign in as any of your users.

  • Stratos Support sets up the connection with you during onboarding. You don't enter credentials in Stratos yourself.
  • A Global Administrator in your tenant must grant admin consent for the permissions. Until they do, the connection fails and onboarding may show Needs customer input.
  • The connection uses a client secret that has an expiry date. Stratos Support renews it before it expires.

Placeholder

To be confirmed: the exact Microsoft Graph application permissions Stratos requests, and the admin consent steps. The reporting features read Microsoft 365 usage reports (for example Teams, email, OneDrive and SharePoint activity, and Office activations), which needs report-read access.
What you seeWhat it meansWhat to do
Onboarding shows Needs customer input asking for admin consentThe consent request hasn't been approved yet.Ask your Global Administrator to approve the consent request from Stratos, then reply on your onboarding page.
An AADSTS65001 error mentioned in an updateThe app is used before consent was granted.Same as above: admin consent is required.

Email delivery

Stratos sends invitations, sign-in links and some notifications by email. Make sure your mail filtering accepts them, or people won't be able to join or sign in.

Placeholder

To be confirmed: the sending address and domain to allowlist in your mail filtering.

Network

Stratos is a web application served over HTTPS. Allow access to the Stratos web address from your network and any proxy. Live updates (new replies, notifications) use a long-lived HTTPS connection, which some proxies close early. If updates only appear after you refresh, check your proxy settings.

Placeholder

To be confirmed: the exact domains to allow.

Browsers

Use a current version of a modern browser with JavaScript and cookies enabled.

Placeholder

To be confirmed: the list of supported browsers and minimum versions.

Last verified November 12, 2026

On this page