Policies

What the built-in Claude Enterprise policy "Connector used with a personal login" in Rencore Governance detects, and the rule behind it.

Preview Access & Sharing Claude Enterprise

What Rencore Governance covers for Copilot: 5 object types and 5 policies, grouped by product area.

Inventory Access & Sharing Licences & Costs AI Governance Reports Copilot

What the built-in Copilot policy "Copilot adoption opportunity - E3/E5 users" in Rencore Governance detects, and the rule behind it.

Copilot

What the built-in Copilot policy "Copilot license assigned to disabled account" in Rencore Governance detects, and the rule behind it.

Licences & Costs Copilot

Detects custom actions that call an external host with no authentication configured. The "Custom GPT calls an external domain without authentication" policy.

Preview Access & Sharing ChatGPT Enterprise

Detects custom GPTs whose owner is inactive or no longer in the workspace. Built-in ChatGPT Enterprise policy "Custom GPT with an inactive owner".

Preview Sprawl & Lifecycle ChatGPT Enterprise

Shows devices with disabled owners or user accounts. The built-in Entra ID policy "Devices with disabled user accounts": what it detects and the rule behind it.

Entra ID

Shows rooms/places with disabled accounts. The built-in Microsoft 365 policy "Disabled room/place accounts": what it detects and the rule behind it.

Microsoft 365

Shows all disabled user accounts. The built-in Microsoft 365 policy "Disabled user accounts": what it detects and the rule behind it.

Sprawl & Lifecycle Microsoft 365

Shows disabled user accounts which have any licenses assigned. Built-in Microsoft 365 policy "Disabled user accounts with assigned licenses".

Licences & Costs Microsoft 365

Identifies unused workspace containers that should be removed to maintain environment cleanliness. Built-in Power BI policy "Empty Workspace cleanup alert".

Sprawl & Lifecycle Power BI

What the built-in Entra ID policy "Enterprise applications (SharePoint add-ins) with certificates or client secrets" detects, and the rule behind it.

Entra ID

What the built-in Entra ID policy "Enterprise applications (SharePoint add-ins) with expired certificates or client secrets" detects, and the rule behind it.

Entra ID

Shows Entra ID apps that use Microsoft Graph permissions. Built-in Entra ID policy "Enterprise applications that use Microsoft Graph permissions".

Access & Sharing Entra ID

Shows Enterprise applications that use SharePoint Online permissions. Built-in Entra ID policy "Enterprise applications that use SharePoint Online permissions".

Access & Sharing Entra ID

What the built-in Entra ID policy "Enterprise applications using Exchange Web Services (EWS)" in Rencore Governance detects, and the rule behind it.

Access & Sharing Entra ID

What the built-in Entra ID policy "Enterprise applications with full control or write permissions" in Rencore Governance detects, and the rule behind it.

Access & Sharing Entra ID

Shows Enterprise Applications without owners (excluding first-party Microsoft apps). Built-in Entra ID policy "Enterprise applications without owners".

Entra ID

What Rencore Governance covers for Entra ID: 22 object types and 14 policies, grouped by product area.

Inventory Access & Sharing Reports Entra ID

Flags users creating 5+ unpublished agents, indicating potential training needs or cleanup requirements. The "Excessive draft agent creation pattern" policy.

Sprawl & Lifecycle Copilot Studio

Identifies reports with external access permissions that may violate data protection policies. The "External sharing risk with external users" policy.

Access & Sharing Power BI

Shows external users (users with user type 'Guest'). The built-in Microsoft 365 policy "External users": what it detects and the rule behind it.

Access & Sharing Microsoft 365

Detects users flagged as external in the corporate directory who have Claude access. Built-in Claude Enterprise policy "External users in Claude organization".

Preview Access & Sharing Claude Enterprise

What the built-in Microsoft 365 policy "External users invited 3 month ago with pending acceptance" in Rencore Governance detects, and the rule behind it.

Access & Sharing Microsoft 365

External users which have not accepted invitation to your tenant. Built-in Microsoft 365 policy "External users with pending acceptance".

Access & Sharing Microsoft 365

What the built-in Copilot Studio policy "External web content dependency risk" in Rencore Governance detects, and the rule behind it.

Access & Sharing Copilot Studio

What the built-in Copilot policy "External website data source risk" in Rencore Governance detects, and the rule behind it.

Access & Sharing Copilot

Shows all Flows that are not shared with a specified service account (adjust account in Policy). The "Flows not shared with specific service account" policy.

Power Automate

Shows Flows with premium connectors, premium actions or premium triggers (e.g. common data service). The "Flows requiring a premium license" policy.

Licences & Costs Power Automate

Shows Flows that use a specific connector (default Twitter). Built-in Power Automate policy "Flows that use a specific connector".

Power Automate

Shows Flows that have failed runs and might not function as intended. Built-in Power Automate policy "Flows with errors".

Power Automate

Shows flows with run count exceeds defined value (default 100 runs). Built-in Power Automate policy "Flows with many runs in last 30 days".

Power Automate

Shows Flows that have no Flow Owners. The built-in Power Automate policy "Flows without owners": what it detects and the rule behind it.

Sprawl & Lifecycle Power Automate

What the built-in Power Automate policy "Flows without runs" in Rencore Governance detects, and the rule behind it.

Sprawl & Lifecycle Power Automate

Shows global administrators that have not activated multi factor authentication. Built-in Microsoft 365 policy "Global administrators without MFA".

Access & Sharing Microsoft 365

Detects groups with no default cap, whose members fall through to the workspace default. The "Group without a default spend limit" policy.

Preview Licences & Costs ChatGPT Enterprise

Shows groups with users (owners and members) that have disabled accounts. Built-in Microsoft 365 policy "Groups with disabled user accounts".

Sprawl & Lifecycle Microsoft 365

Shows groups that have external users as owners. The built-in Microsoft 365 policy "Groups with external owners": what it detects and the rule behind it.

Access & Sharing Microsoft 365

Shows groups that have external users. The built-in Microsoft 365 policy "Groups with external users": what it detects and the rule behind it.

Access & Sharing Microsoft 365

Shows Groups which have fewer owners than defined threshold (default 2 owners). Built-in Microsoft 365 policy "Groups with very few owners".

Microsoft 365

Guest users with a Dynamics license assigned. Built-in Microsoft 365 policy "Guest users with a Dynamics license assigned".

Licences & Costs Microsoft 365

Detects users with no usage this month or last month. The built-in ChatGPT Enterprise policy "Idle ChatGPT seat": what it detects and the rule behind it.

Preview Licences & Costs ChatGPT Enterprise

Detects developer machines not seen for 30 days that are still paired for remote control. Built-in ChatGPT Enterprise policy "Idle Codex machine still paired".

Preview Sprawl & Lifecycle ChatGPT Enterprise

What the built-in Copilot policy "Inactive Copilot users - 30 days" in Rencore Governance detects, and the rule behind it.

Licences & Costs Copilot

Shows external users that have not signed in for more than 6 month. Built-in Microsoft 365 policy "Inactive external users".

Access & Sharing Microsoft 365

Shows internal users that have not signed in for more than 6 month. Built-in Microsoft 365 policy "Inactive internal users".

Access & Sharing Microsoft 365

Identifies all unused content types for possible archiving or removal to improve environment efficiency. The "Inactive Power BI content alert" policy.

Sprawl & Lifecycle Power BI

Identifies specifically reports without recent activity for review and potential archiving. Built-in Power BI policy "Inactive Power BI reports".

Sprawl & Lifecycle Power BI

Identifies workspaces without user activity that may be candidates for archiving or consolidation (30 days). The "Inactive Power BI Workspaces" policy.

Sprawl & Lifecycle Power BI

Shows teams with no message posted in last 6 month and no SharePoint content modified in last 6 month. Built-in Teams policy "Inactive teams".

Sprawl & Lifecycle Teams

Detects inactive workspace users who still own GPTs, projects, agents, Codex environments or library files. The "Inactive user still holding objects" policy.

Preview Sprawl & Lifecycle ChatGPT Enterprise

Detects invitations to addresses that match no Entra ID user or match a guest. Built-in ChatGPT Enterprise policy "Invitation sent to an external domain".

Preview Access & Sharing ChatGPT Enterprise

Show OneDrive Site with more than 100GB data. The built-in OneDrive policy "Large OneDrive sites": what it detects and the rule behind it.

Licences & Costs OneDrive

Shows units consumed for critical licenses like Visio, Project and Power BI Pro. The "License usage for Visio, Project and Power BI Pro" policy.

Licences & Costs Microsoft 365

Shows licenses which are assigned to users with account enabled set to false. Built-in Microsoft 365 policy "Licenses assigned to disabled users".

Licences & Costs Microsoft 365

Shows licenses which are assigned to external users and could be removed or might unnecessary. The "Licenses assigned to external users" policy.

Licences & Costs Microsoft 365

Shows licenses which are users that have not signed in in last 90 days. Built-in Microsoft 365 policy "Licenses assigned to inactive users".

Licences & Costs Microsoft 365

Shows licenses with less than 10 units available to assign to users. Built-in Microsoft 365 policy "Licenses with less than 10 units available".

Licences & Costs Microsoft 365

Shows licenses which have a high number of unused seats. The built-in Microsoft 365 policy "Licenses with unused seats": what it detects and the rule behind it.

Licences & Costs Microsoft 365

Shows Flows that ran for a longer period (default 3 hours). The built-in Power Automate policy "Long running flows": what it detects and the rule behind it.

Power Automate

Shows mailboxes which have redirect rules that redirect to external domains. Built-in Exchange policy "Mailboxes with external redirect rules".

Access & Sharing Exchange

Detects workspace users who are not provisioned through SCIM. Built-in ChatGPT Enterprise policy "Manually managed ChatGPT user".

Preview Sprawl & Lifecycle ChatGPT Enterprise

What Rencore Governance covers for Microsoft 365: 11 object types, 29 policies, 4 automations and 24 built-in actions, grouped by product area.

Inventory Access & Sharing Sprawl & Lifecycle Licences & Costs Reports Reviews Provisioning Automation Microsoft 365

What the built-in Copilot policy "Missing external connection documentation" in Rencore Governance detects, and the rule behind it.

AI Governance Copilot

Shows Flows created in the last defined number of days (default 30 days). Built-in Power Automate policy "New flows".

Power Automate

Teams created in the last 14 days, eg. to send onboarding information. The built-in Teams policy "New Teams": what it detects and the rule behind it.

Teams

Detects scopes whose effective spend limit is unlimited, leaving costs uncapped. Built-in Claude Enterprise policy "No spend limit configured".

Preview Licences & Costs Claude Enterprise

Finds OneDrive accounts linked to disabled user accounts that should be reassigned or deprovisioned. The "OneDrive belongs to a disabled user account" policy.

Sprawl & Lifecycle OneDrive

What the built-in OneDrive policy "OneDrive contains at least one externally shared file" in Rencore Governance detects, and the rule behind it.

Access & Sharing OneDrive

What the built-in OneDrive policy "OneDrive contains files from disabled user accounts" in Rencore Governance detects, and the rule behind it.

Sprawl & Lifecycle OneDrive

What the built-in OneDrive policy "OneDrive file is older than 5 years" in Rencore Governance detects, and the rule behind it.

AI Governance OneDrive

Identifies OneDrive files that have been shared externally, increasing the risk of data leakage. The "OneDrive file is shared with external users" policy.

Access & Sharing OneDrive

Shows OneDrives using more than 90% of their available storage space. Built-in OneDrive policy "OneDrives near storage limit".

Licences & Costs OneDrive

What the built-in Copilot Studio policy "Orphaned Copilot agent ownership gap" in Rencore Governance detects, and the rule behind it.

Sprawl & Lifecycle Copilot Studio

Identifies datasets not connected to any reports that may be consuming resources unnecessarily. Built-in Power BI policy "Orphaned Power BI datasets".

Sprawl & Lifecycle Power BI

User accounts that have more than one License assigned with overlapping apps. Built-in Microsoft 365 policy "Over-licensed user accounts".

Licences & Costs Microsoft 365

Detects ChatGPT projects that are broadly shared and also pull from an external system. The "Over-shared project with external data sources" policy.

Preview Access & Sharing ChatGPT Enterprise

Flags pay-as-you-go plans that exceed a billing amount of 250 within 7 days, requiring billing plan review. The "PAYG Plan limit exceeded - 7 days" policy.

Licences & Costs Copilot Studio

Detects pending invitations that would grant the owner or admin role on acceptance. The "Pending invitation grants owner or admin rights" policy.

Preview Access & Sharing ChatGPT Enterprise

What the built-in Claude Enterprise policy "Plugin from outside the official directory" in Rencore Governance detects, and the rule behind it.

Preview Access & Sharing Claude Enterprise

Detects discoverable plugins that install an MCP server any member can reach. The "Plugin listed to the whole workspace bundles an MCP server" policy.

Preview Access & Sharing ChatGPT Enterprise

The built-in policies Rencore Governance provides, grouped by connector, with the number of policies for each one.

The 1 built-in policy Rencore Governance provides for Azure, with what each one checks, its severity and its category.

Azure

The 30 built-in policies Rencore Governance provides for ChatGPT Enterprise, with what each one checks, its severity and its category.

Preview ChatGPT Enterprise

The 17 built-in policies Rencore Governance provides for Claude Enterprise, with what each one checks, its severity and its category.

Preview Claude Enterprise

The 5 built-in policies Rencore Governance provides for Copilot, with what each one checks, its severity and its category.

Copilot

The 10 built-in policies Rencore Governance provides for Copilot Studio, with what each one checks, its severity and its category.

Copilot Studio

The 14 built-in policies Rencore Governance provides for Entra ID, with what each one checks, its severity and its category.

Entra ID

The 1 built-in policy Rencore Governance provides for Exchange, with what each one checks, its severity and its category.

Exchange

The 29 built-in policies Rencore Governance provides for Microsoft 365, with what each one checks, its severity and its category.

Microsoft 365

The 7 built-in policies Rencore Governance provides for OneDrive, with what each one checks, its severity and its category.

OneDrive

The 3 built-in policies Rencore Governance provides for Power Apps, with what each one checks, its severity and its category.

Power Apps

The 13 built-in policies Rencore Governance provides for Power Automate, with what each one checks, its severity and its category.

Power Automate

The 10 built-in policies Rencore Governance provides for Power BI, with what each one checks, its severity and its category.

Power BI

The 32 built-in policies Rencore Governance provides for SharePoint, with what each one checks, its severity and its category.

SharePoint

The 22 built-in policies Rencore Governance provides for Teams, with what each one checks, its severity and its category.

Teams

The 1 built-in policy Rencore Governance provides for Viva Engage, with what each one checks, its severity and its category.

Viva Engage

What Rencore Governance covers for Power Apps: 4 object types, 3 policies, 4 automations and 4 built-in actions, grouped by product area.

Inventory Access & Sharing Licences & Costs Automation Power Apps

Shows Power Apps that all users of current tenant can viewed and used. Built-in Power Apps policy "Power Apps (canvas apps) shared with everyone".

Access & Sharing Power Apps

Shows PowerApps with no Owners. The built-in Power Apps policy "Power Apps (canvas apps) without owners": what it detects and the rule behind it.

Power Apps

Shows Power Apps with premium connectors, custom connectors, common data service etc. Built-in Power Apps policy "Power Apps requiring a premium license".

Licences & Costs Power Apps

What Rencore Governance covers for Power Automate: 6 object types, 13 policies, 2 automations and 4 built-in actions, grouped by product area.

Inventory Sprawl & Lifecycle Licences & Costs Reports Automation Power Automate

Identifies dashboards specifically shared externally which may contain aggregated sensitive information. The "Power BI dashboards with external access" policy.

Access & Sharing Power BI

Identifies reports lacking required sensitivity classification to ensure data governance compliance. The "Power BI reports without classification" policy.

Access & Sharing Power BI

Identifies workspaces where external users have been granted access rights. Built-in Power BI policy "Power BI Workspaces with external access".

Access & Sharing Power BI

Identifies workspaces lacking designated administrative ownership, creating accountability risks. The "Power BI Workspaces without administrators" policy.

Access & Sharing Power BI

Detects Claude projects that are not private and therefore visible to every organization member. The "Project visible to the whole organization" policy.

Preview Access & Sharing Claude Enterprise

Shows public teams. The built-in Teams policy "Public Teams": what it detects and the rule behind it.

Access & Sharing Teams

Detects ChatGPT projects reachable outside the workspace or by every member. Built-in ChatGPT Enterprise policy "Publicly reachable ChatGPT projects".

Preview ChatGPT Enterprise

Detects custom GPTs reachable outside the workspace by link or through the GPT store. Built-in ChatGPT Enterprise policy "Publicly reachable custom GPTs".

Preview ChatGPT Enterprise

Detects remote sessions that are still in a running state but have not been updated in more than 30 days. The "Remote session left unfinished" policy.

Preview Sprawl & Lifecycle Claude Enterprise

For better cost control move AI services into separate resource groups. Built-in Azure policy "Resource Groups with too many services".

Licences & Costs Azure

Shows Sign-Ins with risk state "At Risk". The built-in Entra ID policy "Risky sign-ins": what it detects and the rule behind it.

Access & Sharing Entra ID

Detects active service account credentials that lapse in the next 30 days. The "Service account credential expiring within 30 days" policy.

Preview ChatGPT Enterprise

Shows service plans assigned to users in the last 4 weeks. Built-in Microsoft 365 policy "Service plans assigned in the last 4 weeks".

Microsoft 365

All Shared Channels that have external user access. The built-in Teams policy "Shared channels with external access": what it detects and the rule behind it.

Access & Sharing Teams

All Shared Channels that have no owners. The built-in Teams policy "Shared channels without owners": what it detects and the rule behind it.

Teams

Detects Codex sandboxes that are shared and can reach source repositories. Built-in ChatGPT Enterprise policy "Shared Codex environment with repository access".

Preview Access & Sharing ChatGPT Enterprise

What the built-in ChatGPT Enterprise policy "Shared custom GPTs affected by the GPT retirement" in Rencore Governance detects, and the rule behind it.

Preview ChatGPT Enterprise

What Rencore Governance covers for SharePoint: 14 object types, 32 policies, 9 automations and 19 built-in actions, grouped by product area.

Inventory Access & Sharing Sprawl & Lifecycle Licences & Costs AI Governance Reports Reviews Provisioning Automation SharePoint

Identifies SharePoint agents that have not been reviewed or approved before use, posing security risks. The "SharePoint agent is not approved" policy.

Access & Sharing SharePoint

What the built-in SharePoint policy "SharePoint agent references confidential site without approval" in Rencore Governance detects, and the rule behind it.

Access & Sharing SharePoint

What the built-in SharePoint policy "SharePoint agent references more than two site collections" in Rencore Governance detects, and the rule behind it.

AI Governance SharePoint

Detects SharePoint agents relying on lists that have not been updated in over a year, affecting AI accuracy. The "SharePoint agent uses outdated list" policy.

AI Governance SharePoint

What the built-in SharePoint policy "SharePoint agent uses outdated site collection" in Rencore Governance detects, and the rule behind it.

AI Governance SharePoint

Sites without MS Teams where External Sharing is active. The built-in SharePoint policy "SharePoint extranet sites": what it detects and the rule behind it.

Access & Sharing SharePoint

Detects SharePoint files that have not been modified in over five years and may be outdated. Built-in SharePoint policy "SharePoint file is older than 5 years".

AI Governance SharePoint

Detects SharePoint files that have been shared externally, potentially exposing sensitive data. The "SharePoint file is shared with external users" policy.

Access & Sharing SharePoint

What the built-in SharePoint policy "SharePoint file is shared with inactive external user" in Rencore Governance detects, and the rule behind it.

Access & Sharing SharePoint

Shows SharePoint Libraries where search has been disabled. Built-in SharePoint policy "SharePoint libraries with disabled search".

SharePoint

Shows SharePoint lists or libraries with more than 5000 items or documents. The "SharePoint lists/libraries with more than 5000 items/documents" policy.

SharePoint

What the built-in SharePoint policy "SharePoint site collection contains more than 10 agents" in Rencore Governance detects, and the rule behind it.

Sprawl & Lifecycle SharePoint

What the built-in SharePoint policy "SharePoint site collection is owned by external users" in Rencore Governance detects, and the rule behind it.

Access & Sharing SharePoint

Detects SharePoint site collections missing sensitivity labels, increasing data security risks. The "SharePoint site collection lacks sensitivity label" policy.

Access & Sharing SharePoint

Shows SharePoint Site Collections using more than 90% of their available storage space. The "SharePoint site collections near storage limit" policy.

Licences & Costs SharePoint

Shows SharePoint site collections that have any site owner account currently disabled. The "SharePoint site collections with disabled owners accounts" policy.

Sprawl & Lifecycle SharePoint

Shows SharePoint site collections that have less than 2 site owners. Built-in SharePoint policy "SharePoint site collections with less than 2 site owners".

SharePoint

Shows SharePoint site collections that have no site owner. Built-in SharePoint policy "SharePoint site collections without any owners".

Sprawl & Lifecycle SharePoint

Detects SharePoint sites where permission inheritance is broken, increasing security risks. The "SharePoint site has broken permission inheritance" policy.

Access & Sharing SharePoint

What the built-in SharePoint policy "SharePoint site is inactive for more than 90 days" in Rencore Governance detects, and the rule behind it.

AI Governance SharePoint

Detects SharePoint subsites that have unique permissions, making security management complex. The "SharePoint subsite has unique permissions" policy.

Access & Sharing SharePoint

Detects organizations where the sso_enforced setting is present but disabled. Built-in Claude Enterprise policy "Single sign-on not enforced".

Preview Access & Sharing Claude Enterprise

Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection. The "Site collection has reached the subsite limit" policy.

SharePoint

Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection. The "Site collection is near subsite limit" policy.

SharePoint

What the built-in SharePoint policy "Site collection is near the list/library limit" in Rencore Governance detects, and the rule behind it.

SharePoint

Shows sites which have not been used in last 90 days and are larger than 1 GB. Built-in SharePoint policy "Site collection is unused with more than 1 GB".

Licences & Costs SharePoint

What the built-in SharePoint policy "Site collections has reached the list/library limit" in Rencore Governance detects, and the rule behind it.

SharePoint

Shows all Site Collections that have more subsites than the root site. Built-in SharePoint policy "Site collections with subsites".

SharePoint

What the built-in SharePoint policy "Sites that have no hubsite configured" in Rencore Governance detects, and the rule behind it.

SharePoint

Shows SharePoint Sites where search has been disabled. The built-in SharePoint policy "Sites with disabled search": what it detects and the rule behind it.

SharePoint

Detects effective spend limits whose current consumption exceeds 80% of the configured limit. Built-in Claude Enterprise policy "Spend limit over 80% consumed".

Preview Licences & Costs Claude Enterprise

Detects ChatGPT projects whose configuration has not changed in 90 days. Built-in ChatGPT Enterprise policy "Stale ChatGPT project".

Preview Sprawl & Lifecycle ChatGPT Enterprise

Detects custom GPTs whose configuration has not changed in 90 days. Built-in ChatGPT Enterprise policy "Stale custom GPT".

Preview Sprawl & Lifecycle ChatGPT Enterprise

Detects invitations still pending more than 30 days after they were sent. Built-in ChatGPT Enterprise policy "Stale invitation".

Preview Sprawl & Lifecycle ChatGPT Enterprise

What the built-in Copilot Studio policy "Stale unpublished Copilot agents - 30 days" in Rencore Governance detects, and the rule behind it.

Sprawl & Lifecycle Copilot Studio

Shows Flows that have stopped. The built-in Power Automate policy "Stopped flows": what it detects and the rule behind it.

Sprawl & Lifecycle Power Automate

Shows Flows that have stopped. The built-in Power Automate policy "Stopped flows last week with errors": what it detects and the rule behind it.

Sprawl & Lifecycle Power Automate

What the built-in Teams policy "Team contains Copilot agent and external members" in Rencore Governance detects, and the rule behind it.

Access & Sharing Teams

What Rencore Governance covers for Teams: 10 object types, 22 policies, 9 automations and 11 built-in actions, grouped by product area.

Inventory Access & Sharing Sprawl & Lifecycle Reports Reviews Provisioning Automation Teams

Shows Teams that have more than 80 owners. The built-in Teams policy "Teams that reach the 100 owner limit": what it detects and the rule behind it.

Teams

Shows Teams that have more than 180 channels. The built-in Teams policy "Teams that reach the 200 channel limit": what it detects and the rule behind it.

Teams

Shows Teams that use forbidden/misleading words in the team display name. Built-in Teams policy "Teams that use forbidden/misleading words in display name".

Teams

Shows teams that use a list of prohibited words in the name or description. Built-in Teams policy "Teams that use prohibited words in the name or description".

Teams

Shows Teams that have at least one disabled owner account. Built-in Teams policy "Teams with a disabled owner account".

Sprawl & Lifecycle Teams

Shows all Teams that have external users/guests. The built-in Teams policy "Teams with external users": what it detects and the rule behind it.

Access & Sharing Teams

Shows teams with external members that have not logged in for more than 6 month. Built-in Teams policy "Teams with inactive external users".

Access & Sharing Teams

Shows Teams teams with less than 2 owners. The built-in Teams policy "Teams with less than 2 owners": what it detects and the rule behind it.

Teams

Shows Teams that have more than a certain number of channels (default 50). Built-in Teams policy "Teams with many channels".

Teams

Shows Teams that have more than a certain number of owners (default 10). Built-in Teams policy "Teams with many owners".

Teams

Shows Teams with a number of users that exceeds a threshold (default 50 users). Built-in Teams policy "Teams with many users".

Teams

Shows Teams where all owners have disabled accounts. Built-in Teams policy "Teams with only disabled owner accounts".

Sprawl & Lifecycle Teams

Shows Teams with private channels. The built-in Teams policy "Teams with private channels": what it detects and the rule behind it.

Teams

Shows Teams which have 1 or no owner. The built-in Teams policy "Teams with very few owners": what it detects and the rule behind it.

Teams

Shows Teams which has 1 or 2 users. The built-in Teams policy "Teams with very few users": what it detects and the rule behind it.

Sprawl & Lifecycle Teams

Shows Teams teams without any owners. The built-in Teams policy "Teams without owners": what it detects and the rule behind it.

Sprawl & Lifecycle Teams

What the built-in Copilot Studio policy "Unauthenticated public agent security risk" in Rencore Governance detects, and the rule behind it.

Access & Sharing Copilot Studio

What the built-in Claude Enterprise policy "Unidentified plugin activity" in Rencore Governance detects, and the rule behind it.

Preview Access & Sharing Claude Enterprise

Flags inactive agents with no usage for 90+ days as candidates for cleanup to reduce sprawl. The "Unused agent cleanup candidate - 90 days" policy.

Sprawl & Lifecycle Copilot Studio

Shows classic SharePoint sites. The built-in SharePoint policy "Unused classic sites": what it detects and the rule behind it.

SharePoint

Detects Codex sandboxes that can reach repositories but have never run a task. The "Unused Codex environment with repository access" policy.

Preview Sprawl & Lifecycle ChatGPT Enterprise

Shows Flows created more than 30 days ago that haven't run in more than 180 days. Built-in Power Automate policy "Unused flows".

Sprawl & Lifecycle Power Automate

Shows M365 licenses with more enabled units than consumed units. The built-in Microsoft 365 policy "Unused licenses": what it detects and the rule behind it.

Licences & Costs Microsoft 365

Shows SharePoint files that are older than 5 years. The built-in SharePoint policy "Unused SharePoint files": what it detects and the rule behind it.

SharePoint

A list of users that are creating Microsoft Loop components in their OneDrive. The "Users who are creating Microsoft Loop Teams components" policy.

Microsoft 365

Show Users with E3 license not using Outlook in last 12 month. Built-in Microsoft 365 policy "Users with E3 license not using Outlook in last 12 month".

Licences & Costs Microsoft 365

Shows users that have not changed their password for more than 6 months. Built-in Microsoft 365 policy "Users with passwords not changed in last 6 months".

Access & Sharing Microsoft 365

Users with assigned Premium License for Power Platform (per user plan). Built-in Microsoft 365 policy "Users with Power Platform Premium license".

Licences & Costs Microsoft 365

What Rencore Governance covers for Viva Engage: 1 object type, 1 policy, 2 automations and 2 built-in actions, grouped by product area.

Inventory Reviews Provisioning Automation Viva Engage

Shows Viva Engage Communities that have no members. Built-in Viva Engage policy "Viva Engage communities without members".

Viva Engage

Detects custom GPTs every workspace member can reach and edit. Built-in ChatGPT Enterprise policy "Workspace-wide custom GPTs with editable configuration".

Preview ChatGPT Enterprise