Tenant-bound support is a remote assistance model that keeps helpdesk sessions within one organization’s managed identity tenant. Instead of allowing arbitrary cross-tenant trust, the support workflow is tied to known accounts, approved devices, and policy controls such as Conditional Access. The goal is to make every support request attributable and enforceable.
This matters because remote support is often abused through social engineering. In attacks, an intruder may pose as IT staff and try to move a user from chat into a screen-sharing or control session. Tenant-bound support reduces that risk by limiting who can initiate support, who can receive it, and under what conditions. Defenders use it to prevent ad hoc external helpers from gaining access, to strengthen auditability, and to make user verification part of the process. It is not just a convenience feature; it is a trust boundary.