Give your people access

Your findings are shown in the Mito portal at mito-app.virtualpetals.com. People sign in with their normal work account. Only the people your Microsoft 365 admin chooses can see your organisation’s findings; everyone else is refused.

This is separate from the read-only app you created in Connect your tenant. It only lets people sign in to the portal, and gives Mito no extra access to your tenant.

You do the setup once, then add or remove people whenever you like. It needs a Global Administrator (or a Cloud Application Administrator) and takes about 5 minutes.

1. Approve the Mito app for your organisation

Open this link, with your tenant ID in place of {tenant-id}:

https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id=7f3685bd-de57-4222-8f9b-6e3d5cf5e672

Sign in as an administrator, check what the app asks for and click Accept. This adds an app called Mito to your tenant’s Enterprise applications.

Tip

Your tenant ID is on the Overview page of the Entra admin center. It is the same value you sent us when you connected your tenant.

2. Only let chosen people sign in

1. In the Entra admin center, go to Enterprise applications and open Mito.
2. Open Properties, set Assignment required? to Yes and click Save.

Without this, anyone in your organisation could sign in to the portal, although they would still see nothing without the role in the next step.

3. Choose who can see your findings

1. In the same app, open Users and groups and click Add user/group.
2. Pick the people who should see your findings.
3. Under Select a role, choose Mito Reader.
4. Click Assign.

You can assign a group instead of individual people if your tenant has Entra ID P1 or higher (included in Microsoft 365 Business Premium). Everyone in the group then gets access.

What people without the role see

People without the Mito Reader role cannot see your findings. With Assignment required? set to Yes, Microsoft stops them at sign-in. Mito also checks the role itself and refuses anyone without it, with a message asking them to contact their Microsoft 365 admin.

Removing someone

Open Enterprise applications → Mito → Users and groups, select the person and click Remove. Their access ends within an hour.

To stop everyone signing in to the portal, delete the Mito enterprise application. This does not stop the daily assessment; see Stopping the service for that.