Request for quotes: Consultancy services for Microsoft Entra ID and role-based access control implementation
WFD is seeking consultancy services to review and improve our current use of Microsoft Entra ID, implement role-based access control (RBAC) across our key systems (SharePoint, Power Platform, and Power BI), and develop a sustainable model for dynamically managing permissions. WFD has approximately 250 users, 60 SharePoint sites, and 10 Power BI workspaces relevant to this assignment. The model should align with WFD’s Programme Delivery Management application, set to be deployed after 1 April 2025.
Overview
Westminster Foundation for Democracy (“WFD”) is the UK public body dedicated to supporting democracy around the world. Operating internationally, WFD works with parliaments, political parties, and civil society groups as well as on elections to help make political systems fairer, more inclusive and more accountable.
We are a problem-solving, practitioner-led organisation that offers.
- Specialist analysis, research, and advice to inform policy makers on a range of democratic governance issues.
- High quality and impactful programmes that directly support the full spectrum of institutions in political systems to develop inclusive political processes, more accountable political systems, protection of rights and freedoms, and more pluralistic societies.
- International elections observation on behalf of the UK.
Aim of this Request for Quotes
WFD is issuing this Request for Quotes (“RFQ”) to a range of potential suppliers of goods and/or services and would welcome a proposal or quote from you/your organisation.
The consultancy services aim to enhance WFD’s management of user permissions and access control across its core Microsoft systems, ensuring security, efficiency, and alignment with WFD’s Programme Delivery Management application.
Quote submission
All proposals or quotes should be submitted by 11pm UK time on 2 March 2025 in writing and include:
- The supplier’s name, status, company number, and registered office address
- An overview of the supplier’s relevant experience, expertise, capability and capacity
- A description of the good(s) or service(s) to be provided and clear explanation as to how this meets the specification in this RFQ
- A transparent quotation of the charge for the good(s) or service(s), in sterling, to include: a clear breakdown of all costs including daily rate card of staff working on this assignment; any proposed discount applied for WFD as a not-for-profit organisation; and a separate identification of any VAT charges (and/or any other applicable tax, excise or other charges).
The proposal or quote should be sent electronically and addressed to: Szelim Simandi at procurement@wfd.org.
The same email address should be used for any questions related to this RFQ.
WFD’s standard terms and conditions for tendering and key policies are found at WFD, General Terms and Conditions for Tendering and you can find a copy of WFD’s Code of Conduct at WFD Code of Conduct.
Detailed Specification
Objective
The consultancy services aim to enhance WFD’s management of user permissions and access control across its core Microsoft systems, ensuring security, efficiency, and alignment with WFD’s Programme Delivery Management application. WFD has approximately 250 users, 60 SharePoint sites, and 10 Power BI workspaces relevant to this assignment.
Scope of work
The scope includes:
- A review of WFD’s current Microsoft Entra ID setup, including its integration with SharePoint, Power Platform, and Power BI.
- Design and implementation of a role-based access control model that enables dynamic and scalable permission management.
- Development of a sustainable framework aligned with WFD’s Programme Delivery Management application.
- Production of appropriate documentation and training materials to support internal teams.
Deliverables
- Detailed design of RBAC: A comprehensive design of the role-based access control model, including role definitions and attribute mapping.
- Configuration of necessary Entra ID attributes: Implementation of the required configurations in Entra ID to support RBAC.
- Partial implementation of the RBAC design with handover: Execution of a partial RBAC implementation, along with appropriate documentation and training to enable WFD staff to complete the implementation independently.
Timeline
The assignment is expected to start on 24 February 2025 and conclude by 31 March 2025.
Reporting
Regular check-in meetings as agreed upon with WFD.
Working arrangements
The assignment may be conducted remotely. Any consultant(s) working on this assignment must be located in – and processing data within – the UK.
Minimum experience and expertise
- Expert knowledge of the Microsoft 365 platform and products. Proven expertise in Microsoft Entra ID and role-based access control implementation. Solutions Partner for Microsoft Cloud would be advantageous.
- A proven ability and commitment to share knowledge with permanent staff in the delivery team.
- Familiarity with relevant industry standards relating to information management systems and security (e.g. ISO 9001:2015, ISO 27001:2022)
- Valid Cyber Essentials or Cyber Essentials Plus accreditation.