Set up Rencore Governance

This guide takes you from your first sign-in to the results of your first scan. At the end you have a Workspace connected to your Microsoft 365 tenant, with an inventory that fills up as the scan runs. Signing in and creating the Workspace takes a few minutes. The first scan can take up to 24 hours, depending on the size of your tenant.

Before you begin

You will need:

• A Microsoft work or school account to sign in. It is only used to sign you in to Rencore Governance.
• A Microsoft 365 administrator account for the tenant you want to govern, or someone who has one, to give consent in stage 4.
• For Power Apps and Power Automate, a dedicated Power Platform Administrator account. For Power BI, Copilot Studio, Azure, Microsoft Foundry, Claude Enterprise and ChatGPT Enterprise, extra setup in that service. You can add these later, see Connect a service.

If you have been invited to an existing Workspace, you only need to sign in. Skip to After your first scan.

Stage 1: Sign in

To sign in for the first time, you will need to:

1. Go to app.rencore.com.
2. Click “Work or school account” and sign in with your Microsoft account.
3. In the consent dialog, review the permissions requested, select “Consent on behalf of your organization” and click “Accept”.
   

You should now see the first step of the Workspace setup.

Stage 2: Create a Workspace

The first time you sign in, you create a Workspace in three steps. To create it, you will need to:

1. On “1. Workspace settings”, enter the “Workspace / Organization name” and accept the Terms of Service. Click “Next”.

2. On “2. Module selection”, choose your governance focus area: “Digital Workplace”, “AI & Agents” or “Code”. Choosing a module turns on its connectors. To choose single connectors instead, click “Pick the services yourself”. No module is selected at the start, so you have to pick one before you can continue. Click “Next”.

   If a connector you need is not listed, let us know.

3. On “3. Data location”, choose one of the supported Azure data centers where your data and governance portal are hosted. All data of the Workspace is stored there. Rencore Governance becomes available in more regions over time, based on customer demand. See Data residency.

4. Click “Finish setup”.

You should now see the home page of your new Workspace. To explore Rencore Governance with demo data instead, see Get a demo Environment. To try Rencore Governance on your own tenant before you buy it, see Start a Rencore Lite trial.

Stage 3: Connect your tenant

To govern your own data, you connect your Microsoft 365 tenant. It becomes the Environment of the Workspace. To connect it, you will need to:

1. Click “Connect tenant now” on the banner at the top of the screen. Or click “Settings”, then “Workspace Settings”, then “Environments”, and click “Connect now”.
2. On the “Connect your tenant” screen, click “Connect” in Stage 1 and sign in to your tenant with an admin account. Rencore Governance reads the tenant details and the current consent status.

You should now see the tenant you connected and the account you used. The full steps, with screenshots, are in Connect a tenant to a Workspace.

Stage 4: Give consent

Consent lets Rencore Governance scan your tenant. It needs an administrator account. Connecting a service needs an admin of that service. Give consent with an account that holds the admin role for it, for example a Power Platform Administrator for Power Apps and Power Automate, or a Fabric Administrator for Power BI.

To give consent, you will need to:

1. In Stage 2 of the “Connect your tenant” screen, choose between global consent and consent per service. Consent per service gives you more control over which apps and permissions you grant.
2. Click “Give Consent” next to each service and sign in with an administrator account. Click the [?] next to a service to see the permissions it needs.
3. If you do not have an administrator account, click “Ask Admin for consent” and send the link to your administrator.

Power Platform, Power BI, Copilot Studio and Azure need extra steps before you can give consent. You can do them now or later, see Connect a service.

Stage 5: Start the first scan

1. In Stage 3 of the “Connect your tenant” screen, click “Explore Rencore Governance”, or click “Done” at the top of the page.

The first scan starts and builds your initial inventory. You do not start or schedule scans yourself. Rencore Governance scans continuously from now on.

Check the first scan

While the scan runs, you should see:

• Under “Inventory”, the connector tiles fill with objects. With partial scanning, the counts update batch by batch while the scan is still running.
• Under “Inventory”, “Inventory Options” ([…]), “All scans”, the scan jobs that have completed and the ones still running. See View scan job history.
• Under “Policies”, results for any policy you turn on, based on the data of the last scan.

Depending on the size of your tenant, it can take up to 24 hours before the first data is shown. Connectors are not scanned in one fixed order. Connectors that use the same Microsoft API share a scan bucket and scan one after the other, while different buckets can scan at the same time. See In which order do the connectors of a tenant get scanned?

What you see

You have a Workspace with one Environment, your Microsoft 365 tenant, connected and scanned with the connectors you gave consent for. Your inventory keeps itself up to date from now on.