Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Features & edition

MSP managed-tenant updates

KeyFeatureGates.msp.downlink
WhereSettings > Features & edition > Feature customization
TypeOn / off
DefaultOff in the catalog; the standard deployment switches it on
FeatureMSP: define once, roll out to your managed tenants · Pro MSP

What it does

The switch for replication between a managing tenant and its managed tenants. On a managing tenant it gates the publish job (the signed baseline managed tenants read); on a managed tenant it gates the pull job (reading and applying that baseline). It is on by default, so replication that runs today keeps running after an upgrade.

When enabled

When on (the default): the pull and publish jobs run on the cadence set on the Job schedule page while a Pro licence covers the MSP role.

When disabled

When switched off: nothing is published on a managing tenant and nothing is pulled on a managed tenant. Each run is recorded as 'held' with the reason on the Job schedule page, and Home says replication is switched off. Nothing already applied is removed.

Risk and how to reverse it

Medium: while it is off, changes on the managing tenant stop reaching the managed tenants (and a managed tenant stops taking them in). Reversible: switch it on; the next scheduled run catches up.

Requires

A Pro licence covering the managing tenant / managed tenant role (the replication jobs themselves refuse to run without one). SuperAdmin to change it.

Recommended

Leave it on. Switch it off only to pause replication on purpose; the Job schedule page also lets you pause just the cadence.

Related settings

  • Scenario Scenario

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com