Consent

This guide sets up Rencore Governance from sign-in to your first scan: create a Workspace, connect your tenant and give consent.

General Settings Scanning Microsoft 365

How to connect a Claude Enterprise organization to Rencore Governance with Anthropic API keys, so its users, projects and activity appear in the inventory.

Claude Enterprise

This guide turns on a Rencore Governance connector and gives it access, with notes for Power Platform, Azure, Foundry, Claude and ChatGPT.

Settings Microsoft 365 Power Apps Power Automate Power BI Copilot Studio Azure Microsoft Foundry Claude Enterprise ChatGPT Enterprise

How to give Rencore Governance consent for Power Platform when your tenant uses the Microsoft admin consent workflow, in three steps.

Settings Power Apps Power Automate

A connector links Rencore Governance to one service, connectors are grouped in three modules, and Preview ones are not yet generally available.

General ChatGPT Enterprise Claude Enterprise Microsoft Foundry

Microsoft changed the API for sensitivity labels, so every connected Microsoft 365 tenant must reconsent for Rencore Governance to keep scanning them.

Scanning Microsoft 365

The 6 permissions the Auditing authenticator of Rencore Governance requests, what each one is used for and its documentation.

The permissions Rencore Governance needs to scan your Azure subscriptions, and how to create the Entra ID app and give consent for it.

Azure

How to give Rencore Governance consent for Azure by entering the details of the Entra ID application you created in the tenant to scan.

Azure Microsoft Foundry

The 1 permission the Azure authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 14 permissions the ChatGPT authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 3 permissions the Claude authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 4 permissions the Copilot authenticator of Rencore Governance requests, what each one is used for and its documentation.

Permissions Rencore Governance requires to connect with Microsoft Copilot Studio.

Copilot Studio

How to connect Copilot Studio to Rencore Governance with an Entra ID application you create, registered for Power Platform with a PowerShell script.

Copilot Studio

For Power BI, you create the Entra ID app yourself in the tenant to scan, then enter its details in Rencore Governance. How to create it, step by step.

Power BI

How to create the Entra ID application for Copilot Studio, and set up a Dataverse Environment by hand if Rencore Governance cannot do it for you.

Copilot Studio

The 8 permissions the Dataverse authenticator of Rencore Governance requests, what each one is used for and its documentation.

For Azure, you create the Entra ID app yourself in the tenant to scan, then enter its details in Rencore Governance. How to create it, step by step.

Azure

The 1 permission the Entra ID authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 2 permissions the Exchange authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 21 permissions the Microsoft 365 all services authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 6 permissions the Microsoft 365 authenticator of Rencore Governance requests, what each one is used for and its documentation.

The Microsoft permissions Rencore Governance requests, one page per authenticator, with what each permission is used for and its Microsoft documentation.

The 3 permissions the OneDrive authenticator of Rencore Governance requests, what each one is used for and its documentation.

The 1 permission the OneDrive permissions authenticator of Rencore Governance requests, what each one is used for and its documentation.

The permissions Rencore Governance requires across Microsoft 365, Power Platform, and the other connectors.

The 1 permission the Planner authenticator of Rencore Governance requests, what each one is used for and its documentation.

The permissions Rencore Governance needs to scan Power BI, and how to create the Entra ID application and give consent for it.

Power BI

How to give Rencore Governance consent for Power BI by entering the details of the Entra ID application you created in the tenant to scan.

Power BI

The 1 permission the Power BI authenticator of Rencore Governance requests, what each one is used for and its documentation.

The Power Platform application is the scanning service used for gathering data about Power Automate and Power Apps entities.

Power Apps Power Automate

The 2 permissions the Power Platform authenticator of Rencore Governance requests, what each one is used for and its documentation.

Rencore Governance needs permissions to your Microsoft 365 tenant in order to operate and collect the data of the connectors that you would like to govern.

How to revoke the permissions you granted Rencore Governance at any time, in the Microsoft Entra admin center or in claude.ai for Claude Enterprise.

The 1 permission the Security and Compliance authenticator of Rencore Governance requests, what each one is used for and its documentation.

They are the Enterprise Applications installed in your tenant when you give consent, plus one app used to connect the tenant. Which apps you get depends on…

Microsoft now requires Multi-Factor Authentication (MFA) for administrator users. You must make sure that MFA is configured for the impacted users (or adjust…

Power Automate

The admin consent workflow lets users who cannot consent to an app request it. Microsoft Entra ID sends the request to designated reviewers, who approve or…

An app registration is the global definition of an application in Microsoft Entra ID. It holds the app's identity, its credentials and the API permissions it…

Entra ID

Application and delegated permissions are the two kinds of Microsoft permissions Rencore Governance asks for. Application permissions read your tenant without…

A client secret is a password-like string that an app registration uses to prove its identity when it requests a token from Microsoft Entra ID.

Entra ID

Consent is the permission a Microsoft 365 administrator grants Rencore Governance to scan a tenant. You give it once globally through a single Azure app, or…

Dataverse is the Microsoft data platform behind Power Platform apps and environments. Rencore Governance reads Copilot Studio through Dataverse.

Power Apps Power Automate Copilot Studio

An enterprise application is the local instance of an app in a Microsoft Entra tenant, its service principal, where admins control who can sign in and which…

Entra ID

Global Administrator is the Microsoft Entra admin role with access to every administrative feature in the tenant, including giving admin consent to apps for…

Entra ID

Microsoft Fabric is the Microsoft analytics platform for end-to-end data work, with Power BI as one of its workloads. It stores its data in one shared data…

Power Platform Administrator is a Microsoft Entra admin role that can manage Power Platform environments, Power Apps, flows and data loss prevention policies…

Power Apps Power Automate

A sensitivity label is a Microsoft Purview classification, such as Confidential or Internal, that an organization applies to content and to containers such as…

The tenant ID is the GUID that identifies your Microsoft Entra tenant. You find it on the overview page of the Microsoft Entra admin center.

Copilot Studio Power BI Azure