Administrators without MFA
Security
Entra ID
Shows administrators that have not activated multi factor authentication
Application registrations without owners
Operation
Entra ID
Shows Application registrations without any owners
Applications with certificates that are about to expire
Operation
Entra ID
Shows Entra ID applications where certificates expire in the next 30 days
Applications with client secrets that are about to expire
Operation
Entra ID
Shows Entra ID applications where client secrets expire in the next 30 days
Applications with expired certificates
Operation
Entra ID
Shows Entra ID applications with expired certificates
Applications with expired client secrets
Operation
Entra ID
Shows Entra ID applications with expired client secrets
Disabled user accounts
User Offboarding
Entra ID
Shows all disabled user accounts
Disabled user accounts with assigned licenses
Costs
Entra ID
Shows disabled user accounts which have any licenses assigned
Enterprise Applications without owners
Operation
Entra ID
Shows Enterprise Applications without owners (excluding first-party Microsoft apps)
Enterprise applications (SharePoint Add-Ins) with certificates or client secrets
Operation
Entra ID
Shows Enterprise applications with certificates or client secrets.
In most cases these applications are SharePoint Add-Ins
Enterprise applications (SharePoint Add-Ins) with expired certificates or client secrets
Operation
Entra ID
Shows Enterprise applications with expired certificates or client secrets. In most cases these applications are SharePoint Add-Ins
Enterprise applications that use Microsoft Graph permissions
Security
Entra ID
Shows Entra ID apps that use Microsoft Graph permissions
Enterprise applications that use SharePoint Online permissions
Security
Entra ID
Shows Enterprise applications that use SharePoint Online permissions
External Users with pending acceptance
External Access
Entra ID
External users which have not accepted invitation to your tenant
External users
External Access
Entra ID
Shows external users (users with user type 'Guest')
External users invited 3 month ago with pending acceptance
External Access
Entra ID
Shows external users invited more than 3 month ago that have not accepted invitation to the tenant
Global administrators without MFA
Security
Entra ID
Shows global administrators that have not activated multi factor authentication
Group found with less than two owners
Operation
Entra ID
Shows Groups which have fewer owners than defined threshold (default 2 owners)
Group with too many members
Entra ID
A group is found with too many members
Group with too many owners
Operation
Entra ID
A group is found with too many owners
Groups with disabled user accounts
User Offboarding
Entra ID
Shows groups with users (owners and members) that have disabled accounts
Groups with external owners
Security
Entra ID
Shows groups that have external users as owners
Groups with external users
External Access
Entra ID
Shows groups that have external users
Guest users with a Dynamics license assigned
Costs
Entra ID
Guest users with a Dynamics license assigned
Inactive external users
External Access
Entra ID
Shows external users that have not signed in for more than 6 month
Inactive internal users
External Access
Entra ID
Shows internal users that have not signed in for more than 6 month
License usage for Visio, Project and Power BI Pro
Costs
Entra ID
Shows units consumed for critical licenses like Visio, Project and Power BI Pro
Licenses assigned to external users
Costs
Entra ID
Shows licenses which are assigned to external users and could be removed or might unnecessary
Licenses assigned to inactive users
Costs
Entra ID
Shows licenses which are users that have not signed in in last 90 days
Licenses with less than 10 units available
Costs
Entra ID
Shows licenses with less than 10 units available to assign to users.
Licenses with too many units
Entra ID
Licenses that have more than 10 units available
Licenses with unused seats
Costs
Entra ID
Shows licenses which have a high number of unused seats
Over-licensed user Accounts
Costs
Entra ID
User accounts that have more than one License assigned with overlapping apps.
Risky Sign-Ins
Security
Entra ID
Shows Sign-Ins with risk state ""At Risk""
Unused Licenses
Costs
Entra ID
Shows M365 licenses with more enabled units than consumed units
Users with Power Platform Premium License
Costs
Entra ID
Users with assigned Premium License for Power Platform (per user plan)
Users with passwords not changed in last 6 months
Security
Entra ID
Shows users that have not changed their password for more than 6 months
Large OneDrive Sites
Costs
OneDrive
Show OneDrive Site with more than 100GB data
OneDrive files shared with external users
External Access
OneDrive
Show OneDrive files shared with external users
OneDrive with files belonging to disabled users accounts
User Offboarding
OneDrive
Shows OneDrives files of disabled users accounts that still have data stored
OneDrives belonging to disabled user accounts
User Offboarding
OneDrive
Shows OneDrives that belong to disabled user accounts
OneDrives near storage limit
Costs
OneDrive
Shows OneDrives using more than 90% of their available storage space
OneDrives with externally shared files
External Access
OneDrive
Shows OneDrives which contain at least one file that has been shared externally
Unused OneDrive files
Operation
OneDrive
Shows OneDrive files that areunmodified for more than 5 years.
Power Apps (Canvas Apps) without Owners
Operation
Power Apps
Shows PowerApps with no Owners
Power Apps requiring a premium license
Costs
Power Apps
Shows Power Apps with premium connectors, custom connectors, common data service etc.
Complex Flows
Operation
Power Automate
Flows with many actions (default 20+), that might require additional documentation
Flows requiring a premium license
Costs
Power Automate
Shows Flows with premium connectors, premium actions or premium triggers (e.g. common data service)
Flows that use a specific connector
Operation
Power Automate
Shows Flows that use a specific connector (default Twitter)
Flows with errors
Operation
Power Automate
Shows Flows that have failed runs and might not function as intended
Flows with many runs in last 30 days
Operation
Power Automate
Shows flows with run count exceeds defined value (default 100 runs)
Flows without Owners
Declutter
Power Automate
Shows Flows that have no Flow Owners
Flows without runs
Declutter
Power Automate
Shows Flows that have never been used. Warning: Flows with runs that happened before the first flow scan of Rencore Governance occurred will not be found.
Long running Flows
Operation
Power Automate
Shows Flows that ran for a longer period (default 3 hours)
New Flows
Adoption
Power Automate
Shows Flows created in the last defined number of days (default 30 days)
Stopped Flows
Declutter
Power Automate
Shows Flows that have stopped
Stopped Flows Last Week with errors
Declutter
Power Automate
Shows Flows that have stopped
Unused Flows
Declutter
Power Automate
Shows Flows created more than 30 days ago that haven't run in more than 180 days
Externally shared files
Security
SharePoint
Shows files shared with external users
SharePoint Extranet Sites
External Access
SharePoint
Sites without MS Teams where External Sharing is active
SharePoint Libraries with disabled search
Operation
SharePoint
Shows SharePoint Libraries where search has been disabled
SharePoint Site Collections with external owners
Security
SharePoint
Shows SharePoint Site Collections that have external users as owners
SharePoint Site collections near storage limit
Costs
SharePoint
Shows SharePoint Site Collections using more than 90% of their available storage space
SharePoint Subsites with unique permission
Operation
SharePoint
Shows SharePoint Subsites with unique role assignments
SharePoint files shared with inactive external users
External Access
SharePoint
Shows SharePoint files which have been shared with external users that have not signed in for more than 6 month
SharePoint lists/libraries with more than 5000 items/documents
Operation
SharePoint
Shows SharePoint lists or libraries with more than 5000 items or documents
SharePoint site collections with disabled owners accounts
User Offboarding
SharePoint
Shows SharePoint site collections that have any site owner account currently disabled
SharePoint site collections with less than 2 site owners
Operation
SharePoint
Shows SharePoint site collections that have less than 2 site owners
Site Collections near Subsite limit
Operation
SharePoint
Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection
Site Collections near the List/Library limit
Operation
SharePoint
Shows Site Collections that have nearly reached the Subsite limit of 2000 List/Library limit per Site Collection
Site Collections that reach the Subsite limit
Operation
SharePoint
Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection
Site Collections with Subsites
Operation
SharePoint
Shows all Site Collections that have more subsites than the root site
Sites with disabled search
Operation
SharePoint
Shows SharePoint Sites where search has been disabled
Unused Classic sites
Classic Sites that are inactive?
Operation
SharePoint
Shows classic SharePoint sites
Unused SharePoint Site collections with more than 1 GB
Costs
SharePoint
Shows sites which have not been used in last 90 days and are larger than 1 GB
Unused SharePoint files
Operation
SharePoint
Shows SharePoint files that are unmodified for more than 5 years.
Unused sites
Declutter
SharePoint
Shows sites that didn’t have activity for a defined period (default 90 days)
New Teams
Adoption
Teams
Teams created in the last 14 days, eg. to send onboarding information
Public Teams
Security
Teams
Shows public teams
Teams that reach the 100 owner limit
Operation
Teams
Shows Teams that have more than 80 owners
Teams that reach the 200 channel limit
Operation
Teams
Shows Teams that have more than 180 channels
Teams that use prohibited words in the name or description
Operation
Teams
Shows teams that use a list of prohibited words in the name or description
Teams with a disabled owner account
User Offboarding
Teams
Shows Teams that have at least one disabled owner account
Teams with external users
External Access
Teams
Shows all Teams that have external users/guests
Teams with inactive external users
External Access
Teams
Shows teams with external members that have not logged in for more than 6 month
Teams with less than 2 owners
Operation
Teams
Shows Teams teams with less than 2 owners
Teams with many channels
Operation
Teams
Shows Teams that have more than a certain number of channels (default 50)
Teams with many owners
Operation
Teams
Shows Teams that have more than a certain number of owners (default 10)
Teams with many users
Operation
Teams
Shows Teams with a number of users that exceeds a threshold (default 50 users)
Teams with only disabled owner accounts
User Offboarding
Teams
Shows Teams where all owners have disabled accounts
Teams with private channels
Operation
Teams
Shows Teams with private channels
Teams with very few users
Declutter
Teams
Shows Teams which has 1 or 2 users
Teams without owners
Declutter
Teams
Shows Teams teams without any owners