Syncro December 2025 Release: Snapshot, Power BI Dashboards, Co-Managed Permissions, and Linux Agent Early Access

Welcome

Dee Zepf: Welcome to the December release day webinar. Today I’m joined by Andy and Lee Ramsey, product manager on the team. The three of us will take you through updates for the month, and as always we’ll leave time at the end for Q&A. Please use the Q&A module in Zoom so we can get to as many questions as possible.

Syncro Snapshot: Free Microsoft 365 Security Assessment

Lee Ramsey: I’m really excited to talk about Snapshots today. We built this in conjunction with CyberDrain. Syncro Snapshot is a free and seamless Microsoft 365 tenant security assessment tool tailored for MSPs. It’s designed to deliver fast and actionable insights without any setup, credential storage, or integration downtime.

Lee Ramsey: It surfaces critical tenant data including Microsoft Secure Score, and helps you identify misconfigurations, gaps, and risk exposure across identity, device, app, and data layers in M365. It’s a powerful dashboard and report you can use to support cross-sell and upsell conversations for services like backup, hardening, and monitoring. Let me show you.

Lee Ramsey: To run it, you provide global admin credentials. You’re then prompted to choose basic or advanced assessment. Basic is for Business Basic and Business Standard. Advanced is for Business Premium, E3, and E5. For this demo tenant with an E5, I’ll run advanced. Within moments you see tenant information: users, guest users, hybrid status. Front and center is Microsoft Secure Score as both a percentage and a raw number, along with how your tenant compares to the average. You’ll see what security categories are configured correctly and what aren’t.

Lee Ramsey: Below that are secure score recommendations, the changes that will have the highest impact on your score, each with a direct action URL linking to the relevant Microsoft Global Admin Center. Then common misconfigurations: can users register applications, create tenants, invite guests? App registration audit: recently registered apps and apps that haven’t been used in a while, great for removing stale access. Global admin count, MFA status for all users with a list of anyone missing MFA, modern auth settings, inactive accounts, unassigned licenses, and mailbox forwarding rules.

Lee Ramsey: The advanced section adds conditional access policies, with the ability to expand policy details beyond just the name, and mailbox protection policies including anti-phishing, anti-spam, safe attachments, anti-malware, safe links, and a quarantine review. Any section can be exported to CSV or PDF. You can also see the raw Microsoft API response for any section.

Lee Ramsey: The report version is a pre-cooked output that generates in moments. You can customize the branding color and remove sections. It’s designed as an executive summary for stakeholders who need to understand the security posture without deep security context, with each section providing a high-level overview, the data, and guidance on how to act on it. There is a full dedicated webinar on Snapshot on Friday for anyone who wants the deep dive.

Dee Zepf: Snapshot is freely available to anyone. You can go run that right now. It’s read-only and the full webinar is on Friday.

Power BI Dashboard Templates

Dee Zepf: We saw a lot of folks building their own Power BI dashboards, or struggling to. We had a Power BI app from a couple years ago in the Team plan that wasn’t easily editable or customizable, so the team created pre-built templates. These are available to everyone on all plans, Core and Team. We’re also making the old Team plan app available to Core users and making it editable.

Dee Zepf: The templates connect to your Syncro account via the API with a quick setup video in Community. There are five templates. The Executive Summary template gives you a quick financial snapshot: total revenue, billable hours, pending ticket charges, so you can see what money is on the line and make sure nothing slips through. The Customer Profitability dashboard shows a profitability ranking highlighting your top and lower performing accounts, with a table breaking down revenue, hours worked, and profit per ticket per client. The Devices dashboard lets you look at manufacturers, OS versions, warranty status, and disk health, filter by customer, and plan replacements. The Workload dashboard shows open tickets, daily resolution rates, and who’s carrying the highest ticket load, with drill-down by technician and customer. The Technician Productivity dashboard shows ticket resolution speed, SLAs at risk, overall resolution performance, and a breakdown of issue types by technician to help ensure work is aligned with skill sets.

Dee Zepf: All five are available today in the Community Hub. There’s a special section for them, a setup video, and we’re planning a Power Hour on these in January to walk through questions and customization tips. These are open templates, so take them, connect them, and modify them however you like.

Co-Managed Permissions

Dee Zepf: For anyone who has internal IT folks working alongside them and wants to give them access to do more things without giving them access to all customers: we’ve added security group support for assets, scripting, and reporting. Your co-managed users can now do those things within their scope without needing access to everything. You’ll continue to see us add more permission controls throughout the platform.

Quality of Life Updates

Dee Zepf: Reporting: we added a CSV export to the applied policy report, which a lot of folks had asked for. We added sortable columns to the ticket time entry report so you can sort by actual hours, billable hours, or date, making it easier to spot unbilled work.

Dee Zepf: Ticketing: the focus for December was addressing reported problems around creating and updating tickets. We added additional CC fields on the ticket create page, made adding and removing CCs smoother, and worked on timeouts and performance throughout ticketing. A lot happening behind the scenes there.

Dee Zepf: General updates: we found and fixed a chat issue where sessions weren’t always terminating properly on the back end, causing assignment routing problems. That’s resolved. Mobile app performance improvements went out. We also made it possible to filter Mac assets separately in the asset view, made a few fixes to calendars, and shipped a range of additional fixes documented in the full release notes.

Early Access: Script Access by Category and Parent-Child Ticket Summary

Andy Cormier: First up in Early Access: granular control over script access. You can now take your script categories and assign them to security groups within Syncro. Two main use cases: restricting junior technicians from accessing scripts that are too complex or risky for them, and co-managed permissions where a client’s internal IT team gets access to basic scripts and the ability to create scripts in their own categories, without access to your full library or the ability to edit your existing scripts. This one is heading into Early Access later this month.

Andy Cormier: Next: new parent-child ticket management controls. This replaces the existing list of child tickets on the parent ticket view. You can now customize columns to see work to be done, target completion dates, current status, total hours, total charges, and billable statuses. Everything is editable inline, very similar to the updated ticket view. This one just went into Early Access today. Sign-up link is in the chat.

Early Access: Linux Agent

Andy Cormier: Last in Early Access: our new Linux agent. Early Access begins next week. The initial functionality includes asset tracking information similar to what we do with Windows and Mac, online and offline monitoring, and basic actions like triggering maintenance mode and reboots. A second wave of functionality is in active development: scripting, remote access through Splashtop, and monitors and alerting like the Windows and Mac side. We expect that second wave around mid-January or just before. Sign-up link is in the chat.

Marketplace: IRONSCALES Integration and Universal Billing Expansion

Andy Cormier: We just released our IRONSCALES integration. This has proven very popular, similar to ThreatDown before it. Thank you to everyone who requested this. You can provision a new account directly from the App Center, or migrate an existing IRONSCALES account into Syncro. In either case, you get access to Universal Billing: map your Syncro customers to your IRONSCALES customers, pull in daily usage, report on it, and automatically update recurring invoices with accurate counts. No minimums, no long-term contracts, and all support is direct from IRONSCALES.

Andy Cormier: With IRONSCALES complete, we just kicked off work on adding Microsoft 365 licensing to Universal Billing. We already pull M365 license data through Entra ID sync, so this is a straightforward extension: you’ll be able to bill for allocated licenses, set allotments, or use a toggle per customer to bill on allocated licenses only or all licenses including unallocated, giving flexibility depending on your contract structure. Directly behind M365, we’ll be adding Bitdefender to Universal Billing as well. That one has been getting a lot of requests.

December Roadmap

Dee Zepf: Mobile app: the biggest project right now is updated ticket sorting and filtering to match the web app. We’re also doing performance work and making the subdomain login much easier. More to come.

Dee Zepf: Project management: we’re doing a series of projects to support all phases of project management. Last month we launched ticket view filters in the report builders. This month, parent-child ticket summary is entering EA. In progress: ticket blueprints. Then we’ll continue improving parent-child ticket visualization, excluding project tickets from recurring billing, and more.

Dee Zepf: Ticket blueprints: if you have a project you do regularly, like onboarding a new employee or setting up a new network, you can create a blueprint with a parent ticket and all child tickets pre-configured. When you need it, apply the blueprint and Syncro creates the entire structure automatically. No manually creating each ticket one at a time.

Dee Zepf: Shipping soon: quality of life updates as always. Linux agent going into EA. Script access by category in EA. IRONSCALES released. Top-5-devices-with-alerts in the executive summary report. Mobile app ticket filtering. In motion: Microsoft 365 billing in Universal Billing, expanded M365 security baselines with a much larger rule set and custom rule support for Team plan users, Stripe ACH with more details coming after the new year, Linux agent phase two. Reporting projects also in motion: asset view CSV export, unbilled work tracking, ticket blueprints. On the radar: easy app uninstall, product bundle improvements, script change log tracking, chat improvements, Mac agent, ticket view CSV export, ticket views by date range.

Q&A

Q: Are there additional data points available in the new Power BI reports?

Dee Zepf: Yes. We took advantage of more API endpoints to bring additional data types into these dashboards based on common requests. Anything available in our API can be brought into Power BI. We continue to add new endpoints month over month, so more data will become available over time.

Q: Do the Power BI reports require Power BI Desktop, or will they work in Power BI Online?

Dee Zepf: Desktop is needed to edit the reports, but you can view and interact with them using Power BI Online. You can easily share a browser link so clients or colleagues can view reports without needing Desktop.

Q: Is there a way to create a client-specific Power BI dashboard restricted to just their data?

Dee Zepf: Yes. You can filter a report to just client data and share that filtered dashboard. The team was also exploring a way to link those filtered reports directly from the Syncro desktop icon for easy client access. More to come on this at the January Power Hour.

Q: Are Power BI reports real-time or do they refresh on a batch schedule?

Dee Zepf: Real-time as of page load. Because they use the Syncro API directly, data loads when you open or refresh the report. There is no scheduled batch refresh. Refresh the page to pull the latest data.

Q: How will M365 billing work if we get licenses through a distributor like TD Synnex?

Andy Cormier: The distributor doesn’t matter. Syncro reads licensing directly from the Entra ID sync. We pull all licenses assigned on the tenant, link them to the Syncro customer, and handle everything the same way regardless of where the licenses were purchased. Switch between TD Synnex, Ingram Micro, PAX8, or direct, and Syncro picks it up automatically as long as you have the Entra ID tenant synced.

Q: What is the status of Stripe ACH, and will it be available in Canada?

Dee Zepf: Stripe ACH is actively in development. Phase 1 will be US only, with international expansion, including Canada, following quickly after. More details after the new year.

Q: Will we be able to remove the Syncro logo from the Snapshot report?

Dee Zepf: Yes. A report update coming soon will allow you to remove the Syncro logo. Today you can already remove the page that contains the Syncro diagram, but full logo removal is coming.

Q: How does Snapshot relate to the ongoing security baselines feature?

Dee Zepf: They are complementary. Snapshot is a one-time read-only point-in-time assessment, best used for prospecting or checking a tenant’s current state. The security baselines feature is ongoing continuous monitoring, alerting you when a tenant drifts from the configured baseline over time. The typical workflow: use Snapshot to win new business and establish what needs fixing, then use baselines to make sure those settings stay in place. Baselines are a Team plan feature.

Q: Do we have plans to add an EU data center for Syncro Cloud Backup?

Dee Zepf: Yes. We believe we will have an EU data center for Syncro Cloud Backup in place before the end of Q1 2026.

Q: Will Syncro add credit card terminals for Stripe?

Dee Zepf: Yes, hardware/terminal support is on our radar. It would come in a later phase after the initial Stripe payment rollout.

Q: Is mobile app invoicing coming?

Andy Cormier: At best, that would be something we’d look at in the second half of 2026. Not in the first half.

Q: Are there plans to add Intune device integration?

Dee Zepf: Yes. We have plans to do work in Intune with devices in 2026, making it much easier to have insight and access into Intune-managed devices inside Syncro. Nothing on the public roadmap with specific timing yet.

Q: How do I submit vendor integration suggestions?

Andy Cormier: Two ways. Post on the Syncro Community forums, or use the Product Feedback option in the app: click the question mark in your Syncro header. Product Feedback comes directly to the product team and helps us analyze request volume.