A Microsoft 365 tenant is a dedicated organizational environment in Microsoft’s cloud. It contains that organization’s identities, mailboxes, files, admin roles, security settings, and audit data, all governed by its own policies and subscriptions. In practice, a tenant is the boundary that separates one company’s Microsoft 365 data and controls from another’s, even though both use the same underlying platform.
This matters in cyber security because attackers usually target the tenant’s identities, not the platform itself. If they can guess passwords, abuse stale accounts, or bypass weak MFA settings, they may gain access to email, documents, and admin tools inside that tenant. Defenders monitor tenant sign-ins, enforce conditional access and MFA, review service accounts, and remove unused identities to reduce exposure. A compromise in one tenant does not automatically affect others, but a poorly managed tenant can become a high-value entry point for phishing, data theft, and lateral movement.