Tenant ownership migration
This is not a platform switch. Your Microsoft 365 tenant already exists; GoDaddy holds the sign-in, the billing, and the partner access. We defederate the domain to Managed authentication, move licensing to Microsoft direct or a CSP, then cut over mail, OneDrive, and DNS in one planned window. One written fixed fee, delivered by senior US-based engineers, typically in 2–4 weeks with 30 days of hypercare.
Representative dashboard — sample data
What you get
A GoDaddy-provisioned tenant looks like any other from the inside, until you try to buy a license Microsoft sells and GoDaddy does not, or an engineer asks for Global Administrator and finds the sign-in belongs to someone else.
GoDaddy-sold tenants federate the domain to GoDaddy's identity service, so every sign-in bounces through GoDaddy's login page. We change the domain authentication type to Managed, and from that moment Microsoft Entra holds the passwords and the sign-in policy.
Defederation invalidates the GoDaddy-managed sign-in, so each user needs a new Entra password and a fresh sign-in on desktop Outlook, mobile mail, and Teams. We set the passwords in a controlled batch, brief staff in writing, and hold a named engineer for the first morning.
Replacement licenses come from Microsoft direct or from a Cloud Solution Provider, are assigned to every user, shared mailbox, and archive, and are confirmed working. Only then is the GoDaddy subscription cancelled, so no mailbox ever sits unlicensed in between.
A reseller tenant carries a partner relationship that gives GoDaddy delegated administration. We remove it, confirm no other delegated relationship survives, and leave your own Global Administrator accounts as the only path into the tenant, with break-glass accounts documented.
Leaving GoDaddy's Microsoft 365 does not mean leaving GoDaddy as registrar unless you want to. The domain stays verified in the tenant, and MX, SPF, DKIM, DMARC, and autodiscover records are checked before and after the change so nothing routes differently.
Some GoDaddy customers are on Workspace Email or Professional Email rather than Microsoft 365. That is an IMAP source, so mail is migrated into new Exchange Online mailboxes with folder structure intact, and calendars and contacts are exported and re-imported separately.
How it works
A free consultation establishes which GoDaddy product you actually have, how many users, shared mailboxes, and domains are in play, what licenses are assigned today, and which plan you want afterwards. You get a written scope, one fixed fee, and a dated runbook.
In a planned window, the domain is switched to Managed authentication, passwords are set for every user, Microsoft direct or CSP licenses are assigned and verified, and GoDaddy's partner relationship is removed. Nothing is cancelled until every mailbox is confirmed licensed.
Users sign in fresh on every device with written instructions, DNS is re-verified, any IMAP mail completes its final sync, the GoDaddy subscription is cancelled, and we remain available for 30 days of included hypercare while the new sign-in settles.
When a business buys Microsoft 365 through GoDaddy, GoDaddy creates the tenant, federates the company domain to its own identity service, bills the licenses, and keeps a partner relationship with delegated administration. The company gets working mail and OneDrive, and for a small team that is often enough for years. The limits show up later: a plan GoDaddy does not resell, a security feature that needs a license GoDaddy cannot add, a consultant who needs Global Administrator and discovers the sign-in path runs through GoDaddy's portal, or simply a renewal price that no longer makes sense. At that point the question is not which platform to move to. The data is already in Microsoft 365. The question is who owns the tenant.
That framing is what separates this engagement from a platform switch. Our Google Workspace to Microsoft 365 migration moves mail, Drive, and shared drives from one vendor's cloud into a new tenant, and our Exchange Server to Exchange Online migration moves mailboxes and public folders off an on-premises server. Here, nothing is usually moving between clouds. Mailboxes, OneDrive libraries, and SharePoint sites stay exactly where they are. What changes is authentication, licensing, and administrative control, and the risk sits in the order those changes happen. Our Microsoft 365 migration services for small business overview sets the three routes side by side, alongside moving a file server into SharePoint.
GoDaddy has sold email under several names, and the label on your invoice determines whether this is a defederation or a mailbox migration. The table is the first thing we settle on the consultation call.
| What GoDaddy sold you | What it really is | What has to move | The path |
|---|---|---|---|
| Microsoft 365 from GoDaddy | A genuine Microsoft 365 tenant, provisioned by GoDaddy as a reseller, with the domain federated to GoDaddy for sign-in and licenses billed through GoDaddy | Authentication, passwords, licensing, and partner access. Mail and files stay in place | Defederate to Managed, relicense with Microsoft direct or a CSP, remove the partner relationship, cancel GoDaddy last |
| Workspace Email or Professional Email | GoDaddy's own hosted mail, reached over IMAP and POP, with no Microsoft 365 tenant behind it | Every mailbox, plus calendars and contacts exported separately | Create and license your own tenant, verify the domain, run an IMAP migration into Exchange Online, then cut MX over at an agreed hour |
| A mix of both | Common in businesses that grew in stages: leadership on Microsoft 365, front-line staff on Workspace Email, one domain shared between them | Both of the above, sequenced so the shared domain never bounces mail | Defederate the existing tenant first, then migrate the IMAP mailboxes into it and retire the second mail host |
Defederation itself is a small change with large consequences. The domain's authentication type in Microsoft Entra is flipped from Federated to Managed, which Microsoft exposes through the Update-MgDomain cmdlet in Microsoft Graph PowerShell (opens in new tab). The instant that runs, GoDaddy's login page stops working for your users and every account needs a password that exists only in Entra. Done at 10am on a Tuesday without a plan, that is an outage. Done in a scheduled window with passwords pre-generated, a distribution plan for them, and written sign-in instructions for Outlook, mobile mail, and Teams, it is an hour of controlled change.
Licensing is the second half, and it is where most self-service attempts go wrong. GoDaddy-billed licenses do not transfer to Microsoft; they are cancelled and replaced. Microsoft's guidance on what happens when a subscription expires (opens in new tab) describes a lifecycle that ends in data deletion, so the replacement licenses, whether bought direct from Microsoft or through a Cloud Solution Provider, are purchased and assigned first and the GoDaddy subscription is cancelled only after every mailbox, shared mailbox, and archive is confirmed licensed on the new subscription. Choosing the replacement plan is its own decision; if the move is your chance to change tiers, our comparison of Microsoft 365 Business Premium versus E3 covers the lines that actually decide it.
The third piece is administrative. A reseller tenant carries a partner relationship, and Microsoft documents how to view and remove partner relationships (opens in new tab) from the admin center. We remove GoDaddy's delegated access, confirm your own Global Administrator accounts and a documented break-glass account, and record the state of the tenant so a future engineer can see exactly what was changed and when.
The table shows scope and typical timeline rather than prices, because an honest number needs the user and domain inventory first. That principle runs through how our fixed-fee process works: one written figure for the whole project, agreed before anything changes, with the reasoning set out in fixed-fee versus hourly consulting.
| Phase | Scope | Typical timeline | Fee |
|---|---|---|---|
| Phase 1 — Inventory and runbook | Identify the GoDaddy product, list users, shared mailboxes, archives, and domains; capture current license assignments and DNS records; choose the replacement plan and purchasing route; write the dated runbook and the staff communication | About 1 week | Fixed fee — scoped after your free consultation |
| Phase 2 — Defederation and relicensing | Switch the domain to Managed authentication, set passwords for every user, assign and verify Microsoft direct or CSP licenses, remove the GoDaddy partner relationship, confirm admin and break-glass accounts; IMAP migration runs in parallel where Workspace Email is in scope | About 1 week, with the change itself in a single planned window | Fixed fee — scoped after your free consultation |
| Phase 3 — Cutover, cancellation, hypercare | Users re-sign-in on every device with written guidance, DNS re-verified, final IMAP sync and MX cutover where applicable, GoDaddy subscription cancelled, tenant documentation handed over, then 30 days of included post-delivery hypercare | 1–2 weeks, plus 30 days of hypercare | Fixed fee — scoped after your free consultation |
Everything lands in the tenant you own, and this time that phrase is literal. The Global Administrator accounts, the licensing agreement, the runbook, and the DNS records are yours throughout, so your team can carry on in-house the moment hypercare ends.
The usual fit is a US company of roughly 10 to 300 people that bought Microsoft 365 through GoDaddy alongside its domain years ago, has grown into needs GoDaddy's catalogue does not cover, and now wants the same tenant with the reseller out of the loop. Often the trigger is a security requirement: conditional access, Intune, or Defender licensing that has to be bought and administered directly. The work is delivered by senior US-based engineers from our Orange County, CA base and remotely across all US states, as part of the fixed-fee Microsoft 365 consulting for small business teams that runs across this site.
Once the tenant is yours, the sensible next step is a Microsoft 365 tenant security assessment. Reseller tenants tend to have been set up for mail and nothing else, so multi-factor authentication coverage, sharing defaults, and admin role assignments are usually the first things to read now that you can finally change them.
Related services
A true platform switch: Gmail, Calendar, Drive, and shared drives moved into a new tenant without losing a day of email.
Mailboxes, public folders, and groups moved off an unsupported on-premises server, with autodiscover and MX cut over to the hour.
Now that you hold the admin accounts, a written read of identity, sharing, and mail flow settings against what your insurer asks for.
Further reading
Hand-written guides from our article library.
The plan lines that actually decide the choice once you can buy any plan Microsoft sells.
What enrolling and enforcing device policy looks like once the licensing is finally yours to assign.
Why a scoped price beats an open meter when the work has a hard cutover window attached.
FAQ
No. Your domain stays registered wherever it is today, GoDaddy included. Defederation changes only how the domain authenticates inside Microsoft 365, from GoDaddy-federated to Managed. Mail keeps arriving at the same addresses, and the only DNS work is confirming that the MX, SPF, DKIM, and DMARC records still point where they should.
It switches the domain's authentication type from Federated to Managed, so users sign in to Microsoft directly instead of through GoDaddy's login page. Every user then needs a new password set in Microsoft Entra, GoDaddy's partner relationship is removed, and licenses are bought from Microsoft or a CSP before the GoDaddy subscription is cancelled.
Usually not. If GoDaddy provisioned a real Microsoft 365 tenant, your mailboxes, OneDrive files, and SharePoint sites already live in it and stay put; what changes is ownership and sign-in. If you are on GoDaddy's older Workspace Email or Professional Email, that is IMAP, and mail does migrate into Exchange Online.
Please do not. Cancelling before replacement licenses are assigned leaves every user unlicensed, and Microsoft's subscription lifecycle eventually deletes the data behind an expired subscription. The safe order is defederate, assign Microsoft or CSP licenses, confirm every mailbox and OneDrive is licensed, then cancel GoDaddy. Your written scope fixes that sequence and the date for each step.
Most engagements run two to four weeks from kickoff, with the defederation itself completed inside a single planned window. The fee is fixed in writing after a free consultation and depends on user count, whether IMAP mail must migrate, and how many domains you hold. Thirty days of hypercare follow the cutover.
Full Global Administrator control of your own tenant, with GoDaddy's delegated access removed. You can then buy any Microsoft 365 plan, add Entra ID, Intune, or Defender licensing, manage conditional access, and grant a partner delegated access on your own terms. Everything we configure is documented and handed to you at close.
Book a free consultation
Tell us what you’re trying to fix — a report, an approval process, an intranet, a Copilot rollout. We scope it as a fixed-fee project, you approve, and a senior engineer delivers in 2–4 weeks.
The fastest way to reach us is the form — tell us the task and we’ll reply within one business day.