Service Catalog
Every tier purpose-built for white-label MSP delivery. Resources enter your toolset, operate under your brand, and exit with zero client footprint.
From NOC to Executive Strategy
Structured capacity tiers allow you to scope exactly the resource mix your growth requires — without carrying permanent headcount risk.
NOC & Helpdesk Operations
Level 1 and Level 2 resources operate directly within your PSA and RMM environment. Tickets are worked under your naming conventions, documentation standards, and SLA targets. Client-facing notes are drafted in your brand voice — we are invisible.
Coverage models include business-hours supplemental, after-hours overflow, and full 24/7 NOC seat replacement. Seat pricing is fixed monthly — no surprise billing against overrun hours.
L1 — End-User Support
- Microsoft 365 user administration and troubleshooting
- Password reset, MFA, conditional access issues
- Connectivity, VPN, and peripheral support
- Ticket intake, logging, and SLA-tracked routing
- Documented in your PSA format, your templates
L2 — Technical Triage & Escalation
- RMM alert monitoring and proactive response
- Server, network, and endpoint triage
- Patch validation and exception management
- Security alert classification and escalation
- Escalation to your L3 or BAY IT project engineers
ConnectWise Manage · Halo PSA · Autotask · Kaseya BMS · ServiceNow · Freshservice · N-central · Datto RMM · Kaseya VSA · NinjaRMM
Azure Infrastructure
- Subscription governance, management groups, and policy
- Virtual network design, peering, and hybrid connectivity
- Azure Virtual Desktop (AVD) deployment and management
- Backup and DR configuration via Azure Recovery Services
- Cost optimization, reserved instances, and licensing review
Microsoft 365 & Modern Workplace
- Tenant migrations (Google Workspace, on-premise Exchange)
- Teams, SharePoint, and OneDrive governance configuration
- Exchange Online mail flow, anti-spam, and deliverability
- Licensing optimization and Microsoft Partner Center management
Intune / Endpoint Management
- Windows Autopilot enrollment and profile design
- Compliance policy and conditional access configuration
- Application packaging, deployment, and lifecycle
- BYOD, MAM, and device enrollment architecture
Project & Cloud Engineering
L3 project engineers are deployed on a per-project or retained basis. They carry Microsoft certifications, operate under SOW-driven governance, and deliver documentation that meets your client QBR standards.
Ideal for MSPs that win infrastructure projects but lack the internal bandwidth or specialized depth — particularly Azure migrations, full Intune greenfield deployments, and identity overhaul engagements.
Security Operations — Abstracted and White-Labeled
Security monitoring, threat detection, and response delivered as a behind-the-scenes capability your MSP can confidently sell.
SOC-as-a-Service
Security event monitoring and triage staffed by trained analysts, operating under your brand and escalation procedures.
- Alert monitoring and triage
- Incident classification and escalation
- SIEM alert correlation support
- Shift-handoff documentation
SIEM Operations
Log aggregation, rule tuning, and threat detection management across Microsoft Sentinel and compatible platforms.
- Microsoft Sentinel deployment and tuning
- Log source onboarding and normalization
- Custom detection rule development
- Compliance reporting from SIEM data
XDR / EDR Management
Endpoint detection and response management for enterprise clients — operated silently within your security stack.
- Microsoft Defender for Endpoint management
- Policy deployment and alert investigation
- Threat hunting support
- Incident response documentation
Zero Trust Identity Architecture
Identity is the modern perimeter. Our engineers design and operate IAM environments aligned to Zero Trust principles — ensuring least-privilege access, strong authentication, and auditable access governance across your clients' environments.
- Microsoft Entra ID (Azure AD) design and governance
- Hybrid identity (AD Connect, ADFS, PHS/PTA)
- Conditional Access policy design and enforcement
- Privileged Identity Management (PIM) configuration
- MFA rollout — Microsoft Authenticator, FIDO2
- SSPR (Self-Service Password Reset) deployment
- Identity Governance — access reviews and lifecycle
- External Identities / B2B guest access control
Zero Trust Readiness Assessment
White-labeled identity maturity assessment delivered as an actionable report under your letterhead. Positions your MSP as the trusted advisor for long-term Zero Trust roadmap delivery.
Compliance Operations Without the Internal Overhead
Enable your MSP to credibly support regulated clients — backed by BAY IT resources who operate within compliance frameworks daily.
Microsoft Purview Operations
Data classification, retention policies, DLP rule configuration, and compliance center administration for M365 environments.
DLP & Insider Risk
Microsoft Purview DLP policy design, Insider Risk Management configuration, and communication compliance for regulated industries.
Compliance Reporting
Audit log review, Secure Score improvement tracking, and regulatory evidence package preparation for client-facing reporting.
Vulnerability Management
Patch automation governance, vulnerability scan review, and remediation prioritization aligned to CIS Benchmark controls.
Backup & DR Governance
Azure-hosted backup configuration, recovery testing procedures, and RTO/RPO documentation for compliance and audit readiness.
vCISO Strategy Layer
Standalone white-labeled CISO advisory — risk assessments, security roadmaps, and board reporting under your MSP brand.
Learn MoreFill the Gaps. Keep the Contract.
Co-managed IT is one of the fastest-growing MSP revenue models — but it requires depth your team may not have internally. BAY IT slots into your co-managed delivery matrix as the invisible specialist tier, supporting your client's internal IT team without displacing you.
- Defined escalation paths from client IT to BAY IT resources
- All communication routed through your channels
- Documentation and knowledge base maintained in your format
- Flexible capacity — expand during projects, contract post-delivery
End client sees only your brand. BAY IT has no contact surface.
Build Your Resource Stack
Use the Resource Estimator to scope capacity and monthly cost — then submit a partner inquiry.