Site collection
AI summary
SharePoint site collections in your tenant are tracked in Rencore Governance as part of the SharePoint inventory. Each site collection is scanned for 41 properties organized into eight categories covering usage, security, storage, and access settings. You can perform administrative actions such as managing owners and quotas, and apply governance policies to monitor and control site collections.
All SharePoint site collectionsSite collectionA site collection is the top-level SharePoint container that holds a root site, its subsites, lists, libraries and files.Read more in your tenant
Part of the SharePoint inventory.
In Rencore Governance
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Daily | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
41 properties in 8 groups. Open a group to see its properties.
Name and identity 7
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Description | String | The descriptive text for the site | {{SiteCollection. |
| Icon | String | Default scanning intervalScan intervalA scan interval is how often Rencore Governance aims to scan one object type, such as daily or weekly.Read more: Initial. | {{SiteCollection. |
| Display Name | String | {{SiteCollection. | |
| Group Id | String | ID of the M365 groupMicrosoft 365 groupA Microsoft 365 Group is the membership object behind many Microsoft 365 workspaces.Read more connected to the site collection. | {{SiteCollection. |
| Site Id | String | GUID that identifies the site collection. | {{SiteCollection. |
| Title | String | Specifies the title of the site collection. | {{SiteCollection. |
| Url | String | Full URL to the root Web site of the site collection. | {{SiteCollection. |
Organization and location 5
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Disable Company Wide Sharing LinksSharing linkA sharing link is a link in SharePoint or OneDrive that grants access to a file or folder, sometimes to people outside your organization.Read more | Boolean | Specifies whether company-wide sharing links are disabled on all child sites. True means company-wide sharing links are disabled throughout the site collection, regardless of the settings on the root or child sites. False means each site can individually decide whether to turn on or off company-wide sharing links. | {{SiteCollection. |
| Geo location | String | The geo location of the site collection. | {{SiteCollection. |
| Hub Site Display Name | String | Display Name of the parent hub site collection. | {{SiteCollection. |
| Hub Site Id | String | ID of the parent hub site collection. | {{SiteCollection. |
| Is Hub Site | Boolean | Declares whether the current Site Collection is the Hub Site of a new Hub. | {{SiteCollection. |
Activity and usage 6
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{SiteCollection. |
| Last Used | DateTime | The date of the last time file activity was detected or a page was viewed on the site collection. This is the same value as in SharePoint admin centerAdmin centerAn admin center is the web portal where administrators manage one Microsoft service, such as the Microsoft 365 admin center, the Teams admin center or the Microsoft Entra admin center.Read more and is not being updated every 24 hours (same as in admin center). | {{SiteCollection. |
| Last Used Days Ago | Int32 | The number of days the last time file activity was detected or a page was viewed on the site collection. This is the same value as in SharePoint admin center and is not being updated every 24 hours (same as in admin center). | {{SiteCollection. |
| Page views in the last 30 days | Int32 | The number of times pages were viewed on the site collection in last 7 days. | {{SiteCollection. |
| Page visits in the last 30 days | Int32 | The number of unique pages that were visited on the site collection in last 7 days. | {{SiteCollection. |
| Last modified | DateTime | Last modified date of the site collection properties. This will update only when editing site collection properties (excluding permission changes) and will not update when editing any content (e.g. List Items and Files). | {{SiteCollection. |
Dates and scanning 2
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{SiteCollection. |
| Created Date | DateTime | Creation date of the site collection. | {{SiteCollection. |
Sharing and access 3
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Allow Guest UserExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more SignIn | Boolean | External users are allowed to access the site collection. | {{SiteCollection. |
| External Sharing | String | Shows the external content can be shared with external users. | {{SiteCollection. |
| Show People Picker Suggestions For Guest Users | Boolean | Represents the option to search for existing guest users via the people picker. | {{SiteCollection. |
Security and compliance 9
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Disable App Views | Boolean | Indicates if UI elements to access Power platformPower PlatformPower Platform is the Microsoft low-code platform where users build their own apps, flows, reports, agents and websites.Read more features have been enabled or disabled for the site collection. | {{SiteCollection. |
| Disable FlowsFlowA flow is a Power Automate workflow, made of a trigger and actions, that runs a task automatically across apps and services.Read more | Boolean | Indicates whether UI elements to access Power Platform flow features have been enabled or disabled for the site collection. | {{SiteCollection. |
| Lock State | String | Shows if the state is normally available, read only or blocked. Allowed values: NoAccess, None, ReadOnly, Unlock. | {{SiteCollection. |
| Risk Score | Int32 | Stores risk score | {{SiteCollection. |
| Risk Score Update | DateTime | Stores risk score update | {{SiteCollection. |
| Risk Score Value | String | Stores risk score value like Low_Low | {{SiteCollection. |
| Sensitivity LabelSensitivity labelA sensitivity label is a Microsoft Purview classification, such as Confidential or Internal, that an organization applies to content and to containers such as Teams and SharePoint sites.Read more | String | The display name of the sensitivity label applied to the site collection. | {{SiteCollection. |
| Share By Email Enabled | Boolean | When true, users will be able to grant permissions to guests for resources within the site collection. | {{SiteCollection. |
| Share By Link Enabled | Boolean | Specifies whether the user will be able to share links to the documents that can be accessed without signing in. | {{SiteCollection. |
Storage, licences and cost 4
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Archived File Storage | Double | The amount of storage consumed by individually archived files on the site collection. Storage of fully archived sites is not included | {{SiteCollection. |
| Storage QuotaStorage limitA storage limit, or quota, caps how much space a SharePoint site or a OneDrive can use from the storage of your tenant.Read more | Double | Specifies the storage quota for this site collection in megabytes. | {{SiteCollection. |
| Storage used | Double | The amount of storage currently being used on the site collection. | {{SiteCollection. |
| Percent of storage used | Double | The percentage of storage currently being used on the site collection based on the maximum usable storage quota. | {{SiteCollection. |
Settings 5
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Allow Designer | Boolean | Specifies whether a designer can be used on this site collection. | {{SiteCollection. |
| Site is archived | Boolean | Shows this site archive state. | {{SiteCollection. |
| Is Group Connected | Boolean | Indicates of a site collection has been connected to an M365 group. | {{SiteCollection. |
| Is Teams Connected | Boolean | Shows if the site is connected to TeamsMicrosoft TeamsMicrosoft Teams is the Microsoft 365 app for chat, meetings and team collaboration.Read more. | {{SiteCollection. |
| Template | String | Indicates the site template of the site collection. A Site template is a container of pre - populated pages, page templates, news post templates, and web parts that can be customized to fit the needs of your organization. A site template can be only be set before creating a SharePoint Site/Site Collection. | {{SiteCollection. |
Relations
| Relation | Connector | Description |
|---|---|---|
| Knowledge | Copilot StudioCopilot StudioCopilot Studio is the Microsoft tool for building your own AI agents. Rencore Governance covers it with the Copilot Studio connector, part of the AI & Agents module.Read more | Used knowledge in Copliot Agent |
| Group | Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more | Group connected to site collection |
| Group | Microsoft 365 | Administrator security groupsSecurity groupA security group is a Microsoft Entra group that gives a set of users access to resources.Read more of a site collection |
| Group | Microsoft 365 | Member security groups of a site collection |
| Group | Microsoft 365 | Owner security groups of a site collection |
| Group | Microsoft 365 | Visitor security groups of a site collection |
| Group | Microsoft 365 | Group with an access to a Site |
| Sensitivity label | Microsoft 365 | Sensitivity label of the site |
| User | Microsoft 365 | Admins of a site collection (direct or via security group) |
| User | Microsoft 365 | Members of a site collection (direct or via security group) |
| User | Microsoft 365 | Owners of a site collection (direct or via security group) |
| User | Microsoft 365 | Visitors of a site collection (direct or via security group) |
| User | Microsoft 365 | User with an access to a Site |
| SharePoint group | SharePoint | |
| SharePoint group | SharePoint | SharePoint Group with an access to a Site |
| SharePoint agent | SharePoint | SharePoint agents inside a list |
| SharePoint agent | SharePoint | SharePoint agents that use this site collection as source. |
| File sharing | SharePoint | All shared SharePoint files with their sharing information |
| List/library | SharePoint | All SharePoint lists and libraries |
| File | SharePoint | All SharePoint files stored in a library of a SharePoint site |
| Folder | SharePoint | All SharePoint folders stored in a library of a SharePoint site |
| Site collection | SharePoint | The SharePoint Site Collections associated to this Hub Site |
| SharePoint special group | SharePoint | Special group administrators of a site collection (direct or via security group) |
| SharePoint special group | SharePoint | Special group members of a site collection (direct or via security group) |
| SharePoint special group | SharePoint | Special group owners of a site collection (direct or via security group) |
| SharePoint special group | SharePoint | Special group visitors of a site collection (direct or via security group) |
| Site | SharePoint | All root site and subsites of a SharePoint site collection |
| Channel | Teams | Private team channel related to site collection |
| Team | Teams | The Team this site collection is related if it is connected to a private channelPrivate channelA private channel is a Microsoft Teams channel that only some members of the team can see.Read more |
| Team | Teams | Team of SharePoint Site collection |
| Community | Viva EngageViva EngageViva Engage, formerly Yammer, is the Microsoft 365 app for company-wide communities.Read more | All Viva Engage communitiesViva Engage communityA Viva Engage community is a group in Viva Engage where people share posts, files and events around a team, project or interest.Read more in your tenant |
Segments
| Segment | Description |
|---|---|
| Classic sites | All Site Collections using classic siteClassic siteA classic site is a SharePoint site built on the older classic experience, with classic pages and lists instead of modern ones.Read more templates |
| Group sites | All sites that are connected to an Microsoft 365 Group |
| Sites with external sharing enabled | All sites that have external sharing enabled |
| Sites with more than 50GB | All sites that host more than 50 GB of data |
| Sites without hub sites | All sites that do not have a hub site assigned |
| Site with SharePoint agents | Identifies SharePoint site collections which contain SharePoint agents |
| Unused sites | Sites that haven't been used for more than 90 days |
Actions
- Add or remove a SharePoint Site Collection Administrator
- Delete SharePoint Site Collection
- Add user to a SharePoint Site
- Remove user from a SharePoint Site
- Remove user from a SharePoint Site Collection
- Set SharePoint Site Collection lock/read only state
- Set Quota for Site Collection
Policies that check this object
| Policy | Severity | Description |
|---|---|---|
| Confidential site referenced in Copilot agent | High | Detects agents connected to SharePoint sites labeled with sensitivity classifications, risking unauthorized data access |
| Unused classic sites | Low | Shows classic SharePoint sites |
| SharePoint extranet sites | Information | Sites without MS Teams where External Sharing is active |
| Classic sites | Information | Shows classic SharePoint sites |
| SharePoint site is inactive for more than 90 days | Medium | Detects SharePoint sites without activity for a defined period, which could impact content accuracy. |
| Site collections with subsites | Information | Shows all Site Collections that have more subsites than the root site |
| SharePoint site collection lacks sensitivity label | Medium | Detects SharePoint site collections missing sensitivity labels, increasing data security risks. |
| SharePoint site collections near storage limit | High | Shows SharePoint Site Collections using more than 90% of their available storage space |
| SharePoint site collections with disabled owners accounts | Low | Shows SharePoint site collections that have any site ownerWorkspace ownerA workspace owner is an owner of a Microsoft 365 workspace, such as a Team, a SharePoint site or a group.Read more account currently disabled |
| SharePoint site collection is owned by external users | High | Identifies SharePoint site collections where external users are in ownership roles, increasing security risks. |
| SharePoint site collections with less than 2 site owners | Medium | Shows SharePoint site collections that have less than 2 site owners |
| SharePoint site collections without any owners | Medium | Shows SharePoint site collections that have no site owner |
| SharePoint site collection contains more than 10 agents | Medium | Detects SharePoint site collections containing more than 10 Copilot agentsCopilot Studio agentA Copilot Studio agent is an AI agent someone built in Microsoft Copilot Studio.Read more, leading to management challenges and potential security risks. |
| Site collection is unused with more than 1 GB | Medium | Shows sites which have not been used in last 90 days and are larger than 1 GB |
| Sites that have no hubsite configured | Information | Shows SharePoint sites, that have not been associated with a SharePoint hub site and thus might be not easily discovered |
| Site collection is near subsite limit | Low | Shows Site Collections that have nearly reached the SubsiteSubsiteA subsite is a site created under another SharePoint site in the same site collection.Read more limit of 2000 sites per Site Collection |
| Site collection is near the list/library limit | Low | Shows Site Collections that have nearly reached the Subsite limit of 2000 List/Library limit per Site Collection |
| Site collections has reached the list/library limit | Medium | Shows Site Collections that have reached the Subsite limit of 2000 List/Library limit per Site Collection |
| Site collection has reached the subsite limit | Medium | Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection |
Frequently asked questions
What is the site collection object in Rencore Governance?
All SharePoint site collections in your tenant. Site collection is an object type in the SharePoint inventory of Rencore Governance.
Which properties does Rencore Governance collect for site collection?
Rencore Governance collects 41 properties for Site collection, such as Allow Designer, Allow Guest User SignIn, Archived File Storage and 38 more.
Which policies check site collection objects?
19 built-in policies check Site collection objects, such as Confidential site referenced in Copilot agent, Unused classic sites and 17 more.
How often is site collection scanned?
By default daily. You can change the scan interval of Site collection objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.
Which actions can I run on site collection objects?
The built-in actions for Site collection objects are Add or remove a SharePoint Site Collection Administrator, Delete SharePoint Site Collection, Add user to a SharePoint Site and 4 more.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?