Microsoft 365 governance and access management at BLS
For BLS AG, Leutrim Miftaraj led a project on governance and access management in Microsoft 365 as IT project lead: from the study as guidance through the rulebook and operations manual to project closure in autumn 2026.
- Organisation
- BLS AG
- Sector
- Transport (rail and bus)
- Role
- IT project lead, engaged through a BLS framework contract partner
Starting point
In many organisations Microsoft 365 has grown over years: teams and sites are created as needed, guests invited and permissions granted without binding rules for lifecycle, ownership and access.
BLS wanted to set these rules bindingly and anchor them so they are actually applied in operations.
Approach
A study served as guidance on goals, options and approach. What became decisive for implementation was the content itself: a governance rulebook, an operations manual and concrete rules, maintained in the BLS knowledge platform.
Planning used a roadmap with dates and milestones, continuously aligned with stakeholders and updated.
At project closure the work is presented internally and handed over to operations.
Outputs
- Governance rulebook for Microsoft 365 and access management
- Operations manual for applying the rules day to day
- Roadmap with dates and milestones
Lessons learned
- A study is good guidance, but only rules maintained where the organisation works become effective.
- Governance is the prerequisite for AI assistants such as Copilot, because they find everything users have access to.
- A maintained roadmap matters more day to day than a perfect plan at the start.
Methods
- Projektleitung
- Microsoft 365
- Governance
- Roadmap-Planung
Further reading
This case study describes Leutrim Miftaraj’s work in the mandate. It contains no confidential content and is not an endorsement by the organisation named.