Policies for Microsoft 365
AI summary
These policy templates for Microsoft 365 are organized into five categories to help you identify and flag issues: security risks, external access, user departures, unused licenses, and operational configurations. Each template assigns a severity level to violations, and some are marked as recommended starting points.
These are the policy templatesPolicyA policy is a governance rule that Rencore Governance checks against your inventory, for example Teams without owners.Read more for Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more, grouped by what they look for. Each template checks one kind of object and flags every item that breaks the rule. The severity shows how serious a violation is; a Recommended pill marks the templates Rencore recommends you start with.
See the Microsoft 365 inventory reference for the objects these templates work on.
Security 4
Risky settings, weak credentials and access that is wider than it should be.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Users with passwords not changed in last 6 months | Shows users that have not changed their password for more than 6 months. | Medium | User |
| Administrators without MFA | Shows administrators that have not activated multi factor authentication. | High | User |
| Global administrators without MFA | Shows global administratorsGlobal administratorGlobal Administrator is the Microsoft Entra admin role with access to every administrative feature in the tenant, including giving admin consent to apps for the whole organization.Read more that have not activated multi factor authentication. | High | User |
| Groups with external owners | Shows groups that have external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more as owners. | High | Group |
Guests and external access 6
Guests, external users and content shared outside your organization.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| External users Recommended | Shows external users (users with user type 'Guest'). | Information | User |
| External users with pending acceptance | External users which have not accepted invitation to your tenant. | Low | User |
| External users invited 3 month ago with pending acceptance | Shows external users invited more than 3 month ago that have not accepted invitation to the tenant. | Low | User |
| Groups with external users Recommended | Shows groups that have external users. | Medium | Group |
| Inactive external users | Shows external users that have not signed in for more than 6 month. | Medium | User |
| Inactive internal users | Shows internal users that have not signed in for more than 6 month. | Medium | User |
Leavers 2
What people who left, or whose accounts are disabled, still own or hold.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Groups with disabled user accounts Recommended | Shows groups with users (owners and members) that have disabled accounts. | Medium | Group |
| Disabled user accounts Recommended | Shows all disabled user accounts. | Medium | User |
Licenses and costs 13
Licenses, spend and storage that cost money without being used.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Licenses assigned to external users Recommended | Shows licenses which are assigned to external users and could be removed or might unnecessary. | Medium | Subscription |
| Licenses assigned to inactive users Recommended | Shows licenses which are users that have not signed in in last 90 days. | Medium | Subscription |
| Licenses assigned to disabled users Recommended | Shows licenses which are assigned to users with account enabled set to false. | Medium | Subscription |
| Licenses with less than 10 units available | Shows licenses with less than 10 units available to assign to users. | Information | Subscription |
| Users with Power Platform Premium license | Users with assigned Premium License for Power PlatformPower PlatformPower Platform is the Microsoft low-code platform where users build their own apps, flows, reports, agents and websites.Read more (per user plan). | Information | User |
| Users with E3 license not using Outlook in last 12 month | Show Users with E3 license not using Outlook in last 12 month. | Low | User |
Show 7 more policies
| Policy | Description | Severity | Checks |
|---|---|---|---|
| License usage for Visio, Project and Power BI Pro Recommended | Shows units consumed for critical licenses like Visio, Project and Power BIPower BIPower BI is the Microsoft service for reports and dashboards over business data.Read more Pro. | Medium | Subscription |
| Licenses with unused seats Recommended | Shows licenses which have a high number of unused seats. | Medium | Subscription |
| Admin accounts with an Office 365 E3 license assigned | Admin accounts with an Office 365 E3 license assigned (Note: please adjust the email address, prefix or postfix to… | Medium | User |
| Disabled user accounts with assigned licenses | Shows disabled user accounts which have any licenses assigned. | High | User |
| Guest users with a Dynamics license assigned | Guest users with a Dynamics license assigned. | Medium | User |
| Over-licensed user accounts | User accounts that have more than one License assigned with overlapping apps. | High | User |
| Unused licenses | Shows M365 licenses with more enabled units than consumed units. | Low | Subscription |
Operations 4
Day-to-day hygiene: naming, ownership, settings and configuration.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Disabled room/place accounts | Shows rooms/places with disabled accounts. | Low | Rooms & equipment |
| Groups with very few owners | Shows Groups which have fewer owners than defined threshold (default 2 owners). | Medium | Group |
| Service plans assigned in the last 4 weeks | Shows service plans assigned to users in the last 4 weeks. | Medium | App |
| Users who are creating Microsoft Loop Teams components | A list of users that are creating Microsoft Loop components in their OneDriveOneDriveOneDrive is the personal file storage of each Microsoft 365 user. The OneDrive connector of Rencore Governance, part of the Digital Workplace module, inventories every OneDrive with its files, folders and file sharing.Read more. | Medium | User |
Frequently asked questions
How many built-in policies does Rencore Governance provide for Microsoft 365?
How many built-in policies does Rencore Governance provide for Microsoft 365?29 built-in policies, such as Licenses assigned to external users, Licenses assigned to inactive users and 27 more.
How are the Microsoft 365 policies grouped?
How are the Microsoft 365 policies grouped?By category: Security, Guests and external access, Leavers, Licenses and costs and Operations.
Which Microsoft 365 policies are recommended?
Which Microsoft 365 policies are recommended?Licenses assigned to external users, Licenses assigned to inactive users, External users and 6 more.
Which module includes the Microsoft 365 connector?
Which module includes the Microsoft 365 connector?The Microsoft 365 connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.