top of page

Administrators without MFA

Security

Entra ID

Shows administrators that have not activated multi factor authentication

Application registrations without owners

Operation

Entra ID

Shows Application registrations without any owners

Applications with certificates that are about to expire

Operation

Entra ID

Shows Entra ID applications where certificates expire in the next 30 days

Applications with client secrets that are about to expire

Operation

Entra ID

Shows Entra ID applications where client secrets expire in the next 30 days

Applications with expired certificates

Operation

Entra ID

Shows Entra ID applications with expired certificates

Applications with expired client secrets

Operation

Entra ID

Shows Entra ID applications with expired client secrets

Disabled user accounts

User Offboarding

Entra ID

Shows all disabled user accounts

Disabled user accounts with assigned licenses

Costs

Entra ID

Shows disabled user accounts which have any licenses assigned

Enterprise Applications without owners

Operation

Entra ID

Shows Enterprise Applications without owners (excluding first-party Microsoft apps)

Enterprise applications (SharePoint Add-Ins) with certificates or client secrets

Operation

Entra ID

Shows Enterprise applications with certificates or client secrets.
In most cases these applications are SharePoint Add-Ins

Enterprise applications (SharePoint Add-Ins) with expired certificates or client secrets

Operation

Entra ID

Shows Enterprise applications with expired certificates or client secrets. In most cases these applications are SharePoint Add-Ins

Enterprise applications that use Microsoft Graph permissions

Security

Entra ID

Shows Entra ID apps that use Microsoft Graph permissions

Enterprise applications that use SharePoint Online permissions

Security

Entra ID

Shows Enterprise applications that use SharePoint Online permissions

External Users with pending acceptance

External Access

Entra ID

External users which have not accepted invitation to your tenant

External users

External Access

Entra ID

Shows external users (users with user type 'Guest')

External users invited 3 month ago with pending acceptance

External Access

Entra ID

Shows external users invited more than 3 month ago that have not accepted invitation to the tenant

Global administrators without MFA

Security

Entra ID

Shows global administrators that have not activated multi factor authentication

Group found with less than two owners

Operation

Entra ID

Shows Groups which have fewer owners than defined threshold (default 2 owners)

Group with too many members

Entra ID

A group is found with too many members

Group with too many owners

Operation

Entra ID

A group is found with too many owners

Groups with disabled user accounts

User Offboarding

Entra ID

Shows groups with users (owners and members) that have disabled accounts

Groups with external owners

Security

Entra ID

Shows groups that have external users as owners

Groups with external users

External Access

Entra ID

Shows groups that have external users

Guest users with a Dynamics license assigned

Costs

Entra ID

Guest users with a Dynamics license assigned

Inactive external users

External Access

Entra ID

Shows external users that have not signed in for more than 6 month

Inactive internal users

External Access

Entra ID

Shows internal users that have not signed in for more than 6 month

License usage for Visio, Project and Power BI Pro

Costs

Entra ID

Shows units consumed for critical licenses like Visio, Project and Power BI Pro

Licenses assigned to external users

Costs

Entra ID

Shows licenses which are assigned to external users and could be removed or might unnecessary

Licenses assigned to inactive users

Costs

Entra ID

Shows licenses which are users that have not signed in in last 90 days

Licenses with less than 10 units available

Costs

Entra ID

Shows licenses with less than 10 units available to assign to users.

Licenses with too many units

Entra ID

Licenses that have more than 10 units available

Licenses with unused seats

Costs

Entra ID

Shows licenses which have a high number of unused seats

Over-licensed user Accounts

Costs

Entra ID

User accounts that have more than one License assigned with overlapping apps.

Risky Sign-Ins

Security

Entra ID

Shows Sign-Ins with risk state ""At Risk""

Unused Licenses

Costs

Entra ID

Shows M365 licenses with more enabled units than consumed units

Users with Power Platform Premium License

Costs

Entra ID

Users with assigned Premium License for Power Platform (per user plan)

Users with passwords not changed in last 6 months

Security

Entra ID

Shows users that have not changed their password for more than 6 months

Large OneDrive Sites

Costs

OneDrive

Show OneDrive Site with more than 100GB data

OneDrive files shared with external users

External Access

OneDrive

Show OneDrive files shared with external users

OneDrive with files belonging to disabled users accounts

User Offboarding

OneDrive

Shows OneDrives files of disabled users accounts that still have data stored

OneDrives belonging to disabled user accounts

User Offboarding

OneDrive

Shows OneDrives that belong to disabled user accounts

OneDrives near storage limit

Costs

OneDrive

Shows OneDrives using more than 90% of their available storage space

OneDrives with externally shared files

External Access

OneDrive

Shows OneDrives which contain at least one file that has been shared externally

Unused OneDrive files

Operation

OneDrive

Shows OneDrive files that areunmodified for more than 5 years.

Power Apps (Canvas Apps) without Owners

Operation

Power Apps

Shows PowerApps with no Owners

Power Apps requiring a premium license

Costs

Power Apps

Shows Power Apps with premium connectors, custom connectors, common data service etc.

Complex Flows

Operation

Power Automate

Flows with many actions (default 20+), that might require additional documentation

Flows requiring a premium license

Costs

Power Automate

Shows Flows with premium connectors, premium actions or premium triggers (e.g. common data service)

Flows that use a specific connector

Operation

Power Automate

Shows Flows that use a specific connector (default Twitter)

Flows with errors

Operation

Power Automate

Shows Flows that have failed runs and might not function as intended

Flows with many runs in last 30 days

Operation

Power Automate

Shows flows with run count exceeds defined value (default 100 runs)

Flows without Owners

Declutter

Power Automate

Shows Flows that have no Flow Owners

Flows without runs

Declutter

Power Automate

Shows Flows that have never been used. Warning: Flows with runs that happened before the first flow scan of Rencore Governance occurred will not be found.

Long running Flows

Operation

Power Automate

Shows Flows that ran for a longer period (default 3 hours)

New Flows

Adoption

Power Automate

Shows Flows created in the last defined number of days (default 30 days)

Stopped Flows

Declutter

Power Automate

Shows Flows that have stopped

Stopped Flows Last Week with errors

Declutter

Power Automate

Shows Flows that have stopped

Unused Flows

Declutter

Power Automate

Shows Flows created more than 30 days ago that haven't run in more than 180 days

Externally shared files

Security

SharePoint

Shows files shared with external users

SharePoint Extranet Sites

External Access

SharePoint

Sites without MS Teams where External Sharing is active

SharePoint Libraries with disabled search

Operation

SharePoint

Shows SharePoint Libraries where search has been disabled

SharePoint Site Collections with external owners

Security

SharePoint

Shows SharePoint Site Collections that have external users as owners

SharePoint Site collections near storage limit

Costs

SharePoint

Shows SharePoint Site Collections using more than 90% of their available storage space

SharePoint Subsites with unique permission

Operation

SharePoint

Shows SharePoint Subsites with unique role assignments

SharePoint files shared with inactive external users

External Access

SharePoint

Shows SharePoint files which have been shared with external users that have not signed in for more than 6 month

SharePoint lists/libraries with more than 5000 items/documents

Operation

SharePoint

Shows SharePoint lists or libraries with more than 5000 items or documents

SharePoint site collections with disabled owners accounts

User Offboarding

SharePoint

Shows SharePoint site collections that have any site owner account currently disabled

SharePoint site collections with less than 2 site owners

Operation

SharePoint

Shows SharePoint site collections that have less than 2 site owners

Site Collections near Subsite limit

Operation

SharePoint

Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection

Site Collections near the List/Library limit

Operation

SharePoint

Shows Site Collections that have nearly reached the Subsite limit of 2000 List/Library limit per Site Collection

Site Collections that reach the Subsite limit

Operation

SharePoint

Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection

Site Collections with Subsites

Operation

SharePoint

Shows all Site Collections that have more subsites than the root site

Sites with disabled search

Operation

SharePoint

Shows SharePoint Sites where search has been disabled

Unused Classic sites
Classic Sites that are inactive?

Operation

SharePoint

Shows classic SharePoint sites

Unused SharePoint Site collections with more than 1 GB

Costs

SharePoint

Shows sites which have not been used in last 90 days and are larger than 1 GB

Unused SharePoint files

Operation

SharePoint

Shows SharePoint files that are unmodified for more than 5 years.

Unused sites

Declutter

SharePoint

Shows sites that didn’t have activity for a defined period (default 90 days)

New Teams

Adoption

Teams

Teams created in the last 14 days, eg. to send onboarding information

Public Teams

Security

Teams

Shows public teams

Teams that reach the 100 owner limit

Operation

Teams

Shows Teams that have more than 80 owners

Teams that reach the 200 channel limit

Operation

Teams

Shows Teams that have more than 180 channels

Teams that use prohibited words in the name or description

Operation

Teams

Shows teams that use a list of prohibited words in the name or description

Teams with a disabled owner account

User Offboarding

Teams

Shows Teams that have at least one disabled owner account

Teams with external users

External Access

Teams

Shows all Teams that have external users/guests

Teams with inactive external users

External Access

Teams

Shows teams with external members that have not logged in for more than 6 month

Teams with less than 2 owners

Operation

Teams

Shows Teams teams with less than 2 owners

Teams with many channels

Operation

Teams

Shows Teams that have more than a certain number of channels (default 50)

Teams with many owners

Operation

Teams

Shows Teams that have more than a certain number of owners (default 10)

Teams with many users

Operation

Teams

Shows Teams with a number of users that exceeds a threshold (default 50 users)

Teams with only disabled owner accounts

User Offboarding

Teams

Shows Teams where all owners have disabled accounts

Teams with private channels

Operation

Teams

Shows Teams with private channels

Teams with very few users

Declutter

Teams

Shows Teams which has 1 or 2 users

Teams without owners

Declutter

Teams

Shows Teams teams without any owners

Athentra's out-of-the-box Compliance Policies

The comprehensive compliance system

bottom of page