Microsoft has extended its Organizational Data in Microsoft 365 service to GCC-Moderate tenants, granting U.S. government agencies access to Viva-powered workforce analytics for the first time. The move closes a long-standing gap between commercial and government cloud environments, allowing defense and civilian agencies to upload HR information, hierarchy structures, and other organizational attributes directly into the Microsoft 365 admin center. Once ingested, that data feeds Microsoft Viva modules—including Insights, Pulse, and Glint—turning raw personnel data into actionable intelligence for managers and leaders.

Organizational Data in Microsoft 365 acts as the connective tissue between an agency’s people data and the Viva suite. Administrators upload CSV files or connect via API to surface manager hierarchies, office locations, tenure bands, and custom attributes. The service validates and transforms those inputs, then makes them available across Viva experiences without duplicating or moving sensitive data outside the tenant’s compliance boundary. For government customers, that boundary now extends to the GCC-Moderate environment, which meets FedRAMP Moderate, CJIS, and IRS 1075 requirements.

Why GCC-Moderate matters

GCC-Moderate is not just a checkbox for compliance. It runs on Azure Government infrastructure, physically separated from commercial datacenters, and requires that all support personnel be screened U.S. citizens. Before this launch, government tenants had to rely on manual exports, third-party tools, or wait for commercial parity to access the same people analytics capabilities available to enterprises. By delivering Organizational Data as a web experience inside the Microsoft 365 admin center, Microsoft removes the barrier that kept agencies from adopting Viva Insights at scale.

The timing aligns with a broader push inside government to adopt data-driven workforce management. Federal initiatives such as the President’s Management Agenda emphasize employee engagement and skills-based hiring. Agencies like the Department of Veterans Affairs and the Environmental Protection Agency have piloted Viva Insights in commercial tenants; GCC-Moderate support means they can now operate inside their compliant environment without special carve-outs.

How it works under the hood

From the admin perspective, the workflow is straightforward. In the Microsoft 365 admin center, a new Organizational data card appears under the Setup or Health sections. Administrators upload a flat file with at least the required schema fields—PersonId, ManagerId, and Organization—alongside optional columns for title, location, division, and up to 15 custom attributes. The service checks for data quality issues, such as orphan managers or empty required fields, and provides a downloadable error report. Once validated, the data is mapped to Azure Active Directory identities and made available to Viva Insights and Viva Pulse within 24 hours.

Privacy controls remain in the hands of the tenant. Organizational data never leaves the GCC-Moderate compliance scope. Viva Insights processes it together with Microsoft 365 collaboration signals (email, meetings, calls, documents) to produce aggregate, de-identified metrics. Individual dashboards show personal insights only to the employee, while manager and leader views require minimum group sizes to prevent identification. Microsoft explicitly states that organizational data is not used for AI training, advertising, or any purpose other than the Viva features the tenant has enabled.

What gets unlocked for agencies

The immediate benefit is a single source of truth for workforce analytics. Instead of stitching together employee rosters from multiple HR systems, agencies can rely on the Microsoft 365 admin center to be the canonical data provider. That simplicity accelerates adoption of three key Viva experiences:

  • Viva Insights: Provides personalized recommendations for focus time, meeting habits, and well-being. Managers see team trends like after-hours collaboration and meeting load. Leaders get organization-wide views segmented by function, location, or custom attribute.
  • Viva Pulse: Enables lightweight employee surveys that respect organizational hierarchy. Without organizational data, a Pulse survey cannot guarantee privacy-compliant reporting or route results to the correct manager.
  • Viva Glint (formerly Glint): Uses organizational data to slice employee engagement scores by tenure band, grade, or division, helping agencies pinpoint attrition risks or engagement hotspots.

Agencies can also combine organizational data with Viva Goals to link OKR progress to specific teams or cost centers. For example, a cybersecurity directorate could track how its training completion rates correlate with the collaboration patterns surfaced by Insights.

Getting started in the GCC-Moderate admin center

Administrators with the Global Administrator, Organizational Data Administrator, or Viva Insights Administrator roles can access the new experience. Microsoft recommends starting with a small pilot file—perhaps 500 users—to validate the schema before uploading the full workforce. The service supports incremental updates, so as people change managers or departments, a new upload replaces the previous mapping.

For agencies that already maintain an Azure AD organizational hierarchy via the manager attribute, the upload process still adds value. Viva Insights can derive hierarchy from Azure AD, but it lacks the rich context that HR files provide—like job family, full-time equivalency, or FLSA exemption status. By combining both sources, agencies gain a 360-degree view that drives more precise analysis.

Compliance and data handling

Microsoft’s documentation confirms that organizational data is encrypted in transit and at rest using TLS 1.2+ and service-managed keys. The data is stored inside the customer’s Microsoft 365 tenant and is not accessible to Microsoft personnel without explicit customer authorization through Customer Lockbox. For GCC-Moderate tenants, the data resides exclusively in Azure Government regions, which carry specific assurances around data not being used for marketing or secondary purposes.

Agencies concerned about the sensitivity of HR data should note that the upload schema does not require personally identifiable information beyond what is already in Azure AD. Social Security numbers, performance ratings, and salary bands are not part of the default schema. While custom attributes can carry any string, Microsoft recommends against loading highly sensitive data and provides a field-level sensitivity classification guide.

What’s next for government cloud and Viva

This release signals Microsoft’s intention to bring the full Viva suite to GCC-Moderate. Viva Learning and Viva Connections are already available in government clouds; Viva Insights with Organizational Data fills a critical piece of the puzzle. Rumors within the Microsoft Tech Community suggest that Viva Goals and Viva Engage may follow later this year, though no official timelines have been announced.

For agency IT teams, the immediate task is to prepare a clean organizational data file and validate it against the schema. The Microsoft 365 admin center provides a step-by-step wizard that includes data-mapping guidance. Post-upload, administrators should monitor the Viva Insights admin portal to confirm that data has been processed correctly and that manager hierarchies resolve as expected.

Real-world impact waiting to unfold

While the launch announcement does not include specific agency case studies, the use cases are well-established in the commercial space. Large enterprises have used Organizational Data to identify friction points in cross-divisional collaboration, measure the time employees spend in meetings versus executing core work, and reduce burnout by surfacing after-hours overload. Public-sector organizations often face similar challenges but under stricter compliance regimes. The availability of Organizational Data in GCC-Moderate removes the last architectural excuse for not tackling those issues with data.

Leaders in the federal government IT community have already expressed interest. On a recent call hosted by the Digital Government Institute, several CTOs noted that the lack of integrated organizational data was the primary barrier to Viva adoption. “We had the licenses, but we didn’t have the plumbing,” one participant said. That plumbing is now installed.

A milestone for government workplace modernization

Bringing Organizational Data to GCC-Moderate aligns with the broader trend of meeting government customers where they are. Microsoft’s government cloud has historically lagged behind its commercial counterpart, sometimes by months or years. This launch shows a narrowing gap and reflects sustained investment in the Azure Government infrastructure that supports it.

For Windows and Microsoft 365 enthusiasts, the news matters because it reinforces the platform’s reach. Government agencies running Windows 11 endpoints with Microsoft 365 E5 licenses now have a fully connected experience—from the desktop to the admin center to Viva insights—without leaving the GCC-Moderate boundary. That continuity is exactly what IT leaders have been asking for as they modernize agency workplaces.

Administrators can find the new Organizational Data setup card today in their GCC-Moderate tenant’s Microsoft 365 admin center. The service is generally available at no additional licensing cost beyond the existing Viva Insights or Viva Suite license. A detailed setup guide is available on Microsoft Learn under the Viva Insights administration section.