Microsoft 365
AI summary
Rencore Governance inventories your Microsoft 365 groups, users, licenses and related objects. It includes 29 policies to flag issues like disabled accounts, external user risks and unused licenses, with automations to fix them automatically. You can create reports, run review cycles where owners confirm access, and use templates to provision new workspaces.
The Microsoft 365 connector covers the groups, users and licenses behind your tenant. It inventories Microsoft 365 groups, users, deleted groups and users, subscriptions, service assignments, sensitivity labels and Message Center messages.
Inventory
The objects Rencore Governance collects for Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more, and how to search, segment and extend them.
Policies
Rules that check your inventory and flag violations.
Use cases: Delegate governance by country or subsidiary
Access & sharing
Who can reach what: permissions, guests, external access and sharing.
Use cases: Clean up after leavers, Govern guests and external users, Recertify access with reviews
Policies 10
- External users
- External users with pending acceptance
- Users with passwords not changed in last 6 months
- Administrators without MFA
- External users invited 3 month ago with pending acceptance
- Groups with external users
- Global administrators without MFA
- Groups with external owners
Show 2 more
Reports 1
Sprawl & lifecycle
Find inactive, ownerless and unused objects and clean them up.
Use cases: Clean up after leavers, Keep every workspace owned
Automations 1
Licences & costs
Licence use and costs inside your connectors, for example unused licences.
Use cases: Reduce license and AI spend
Policies 13
- Licenses assigned to external users
- Licenses assigned to inactive users
- Licenses assigned to disabled users
- Licenses with less than 10 units available
- Users with Power Platform Premium license
- Users with E3 license not using Outlook in last 12 month
- License usage for Visio, Project and Power BI Pro
- Licenses with unused seats
Reports
Create, share and export reports on your inventory.
Use cases: Delegate governance by country or subsidiary, Report and prove compliance
Reviews
Reviews: who reviews which workspaces, how review cyclesReviewA Review is a recurring or one-off check in which workspace owners confirm who has access to their Microsoft 365 workspaces, directly in the Rencore Teams App.Read more run and what happens to the results.
Use cases: Recertify access with reviews
Automations 2
Reviews 1
Provisioning
Requests for new workspaces, the templates behind them and their approval.
Automation actions 1
Automation
AutomationsAutomationAn automation is a workflow Rencore Governance runs on inventory objects when a trigger fires.Read more and the actions they run, by hand or when a policy finds a violation.
Use cases: Connect governance to your ticket system
Built-in actions 24
- Set Sensitivity Label for a Microsoft 365 Group
- Delete group
- Delete User Account
- Disable User Account
- Enable User Account
- Add member user to a group
- Add owner user to a group
- Add group to a group
Show 16 more
- Add user to a group
- Remove group from a group
- Remove user from a group
- Add subscriptions for a user
- Remove subscriptions for a user
- Restore deleted group
- Restore User Account
- Add subscriptions for a user
- Add user to a group
- Add user to a SharePoint Site
- Add user to a Team
- Remove user from a group
- Remove user from a SharePoint Site
- Remove user from a SharePoint Site Collection
- Remove user from a Team
- Remove subscriptions for a user
Automation actions 49
- Add or remove License for a User
- Add or remove a Group from a Flow
- Add or remove a Group from a Group
- Add or remove a Group from a Power App
- Add or remove a Group from a Workspace
- Add or remove a SharePoint File Group with certain permission
- Add or remove a SharePoint File User with certain permission
- Add or remove a SharePoint Folder Group with certain permission
Show 41 more
- Add or remove a SharePoint Folder User with certain permission
- Add or remove a SharePoint List Group with certain permission
- Add or remove a SharePoint List User with certain permission
- Add or remove a SharePoint Site Collection Administrator
- Add or remove a SharePoint Site Collection Group with certain permission
- Add or remove a SharePoint Site Collection User with certain permission
- Add or remove a SharePoint Site Group with certain permission
- Add or remove a SharePoint Site User with certain permission
- Add or remove a User from a Community
- Add or remove a User from a Flow
- Add or remove a User from a Group
- Add or remove a User from a Power App
- Add or remove a User from a SharePoint group
- Add or remove a User from a Team
- Add or remove a User from a Team Channel
- Add or remove a User from a Workspace
- Add or remove group from/to a SharePoint File sharing
- Add or remove user from/to a SharePoint File sharing
- Change property of a Group
- Change property of a User
- Delete Community
- Delete Group
- Delete SharePoint Site Collection
- Delete Team
- Delete User
- Enable or disable a User account
- Remove a User from a SharePoint Site Collection
- Remove a User from a Team
- Restore SharePoint File broken inheritance
- Restore SharePoint Folder broken inheritance
- Restore SharePoint List broken inheritance
- Restore SharePoint Site broken inheritance
- Restore deleted Group
- Restore deleted Team
- Restore deleted User
- Set Sensitivity Label for a M365 Group
- Set visibility of a Group
- Update SharePoint site member role
- Update community member role
- Update group member role
- Update team member role
How-to guides
- Inventory guides (18 pages)
- Policies guides (15 pages)
- Reports guides (11 pages)
- Reviews guides (6 pages)
- Provisioning guides (10 pages)
- Automation guides (21 pages)
Permissions and consent
Frequently asked questions
Can Rencore Governance find unused Microsoft 365 licenses?
Yes. Policies flag licenses assigned to disabled, inactive or external users, licenses with unused seats and over-licensed user accounts. Reports list the same findings for review.
Does Rencore Governance cover external users?
Yes. Policies flag external users, external users with pending acceptance, inactive external users and groups with external users or owners. An automation can disable inactive external user accounts.
Which permissions does the Microsoft 365 connector need?
Rencore Governance reads groups and users through application permissions you consent to in Microsoft Entra ID. The connector's Permissions and consent section links every Microsoft Permissions entry that covers them.
What does Rencore Governance cover for Microsoft 365?
11 object types, 29 policies, 4 automations and 24 built-in actions.
Which module includes the Microsoft 365 connector?
The Microsoft 365 connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?