Product area
Scanning
How Rencore Governance scans your tenant, scan limits, throttling and scan errors.
29 pages · All tags
Getting started 1
- Getting startedSet up Rencore Governance
This guide sets up Rencore Governance from sign-in to your first scan: create a Workspace, connect your tenant and give consent.
Guides 7
- Guides › Troubleshooting › Scan errorsPower Platform: failed to create a Microsoft Dataverse system row representing user
What the Power Platform scan error "Failed to create a Microsoft Dataverse system row representing user" means, and how to fix it.
- Guides › Troubleshooting › Scan errorsPower Platform: the user cannot be created in Microsoft Dataverse
Why a Power Platform scan reports that the user cannot be created in Microsoft Dataverse, and how an admin fixes it by adding the user to the group.
- Guides › Troubleshooting › Scan errorsPower Platform: user does not have sufficient permissions in Microsoft Dataverse for flow
The Power Platform consent account cannot read a flow in its Dataverse environment, so Rencore Governance skipped the details of that flow.
- Guides › TroubleshootingScan errors
What each Rencore Governance scan error message means, why it happens and how to fix it, for SharePoint, Teams and Power Platform scans.
- Guides › Troubleshooting › Scan errorsSharePoint: forbidden, access denied to resource
A SharePoint scan could not read a site icon because policies or configuration on the tenant deny access to it.
- Guides › Troubleshooting › Scan errorsSharePoint: too many subsites
A Microsoft Graph bug stops the scan of a SharePoint site collection with more than 12 subsites. How to fix it by moving subsites.
- Guides › Troubleshooting › Scan errorsTeams: channel tabs null
A Microsoft Graph bug stops the scan of Teams channel tabs that have no display name. How to fix it by removing the invalid tabs.
Concepts 4
- ConceptsInventory and scanning
The inventory holds every object Rencore Governance scans, continuous and partial scanning keep it current, and segments filter it.
- Concepts › NotificationsProgressive scanning
A 2025 notice: progressive scanning brings results into Rencore Governance while a scan is still running. It is now how every scan works.
- Concepts › NotificationsReconsent for sensitivity label scanning
Microsoft changed the API for sensitivity labels, so every connected Microsoft 365 tenant must reconsent for Rencore Governance to keep scanning them.
- Concepts › NotificationsSharePoint and OneDrive scanning performance
Rencore Governance splits SharePoint and OneDrive scans into base jobs and files and folders jobs, and adds a new app for OneDrive files.
Reference 5
- Reference › Scanning & throttlingContinuous scan
Rencore Governance scans your Microsoft 365 tenant in the background, with a scan interval per object type, so there is no fixed update schedule.
- Reference › Scanning & throttlingPartial scanning
Partial scanning updates the Rencore Governance inventory batch by batch while a scan runs, instead of waiting for the whole tenant to finish.
- ReferenceScanning & throttling
How Rencore Governance scans your tenant and manages throttling limits imposed by Microsoft 365.
- Reference › Scanning & throttlingThrottling by Microsoft 365
What Microsoft 365 throttling is, why Microsoft limits API requests, and how it slows down or delays Rencore Governance scans.
- Reference › Scanning & throttlingUnderstanding scan buckets and parallel scanning
How Rencore Governance groups connectors into scan buckets that run in parallel, to keep scans fast and stay within Microsoft API throttling limits.
FAQ 4
- FAQAre there any limitations to scans in Rencore Governance?
Yes. Rencore Governance skips SharePoint libraries that only hold system content, such as hidden lists, app lists, catalogs and site assets. Pictures, site…
- FAQAre there limits in regards to the size of the Microsoft 365 tenant that is analyzed?
No, we tested Rencore Governance already with tenants of over 250,000 users. Rencore Governance scales its infrastructure automatically, but the amount of the…
- FAQHow often can I perform a scan?
Rencore Governance scans your tenant automatically. You set how often each object type is scanned, for example daily or weekly. The interval is a target, not a…
- FAQIn which order do the connectors of a tenant get scanned?
Connectors are not scanned in one fixed order. Rencore Governance groups connectors that use the same Microsoft API into a scan bucket. Connectors in the same…
Glossary 8
- GlossaryMicrosoft Graph
Microsoft Graph is the Microsoft API that gives access to the data of the Microsoft 365 services. Rencore Governance reads most of your tenant through it, with…
- GlossaryPartial scanning
Partial scanning is the Rencore Governance scanning engine that updates the inventory while a scan is still running. Inventory totals, policy results and…
- GlossaryScan
A scan is how Rencore Governance reads metadata from a connected tenant into the inventory. Scanning is continuous, and there is no fixed time when all data is…
- GlossaryScan bucket
A scan bucket is a group of connectors that never scan at the same time because they share the same Microsoft APIs. Connectors from different buckets scan in…
- GlossaryScan error
A scan error means Rencore Governance could not read part of your tenant during a scan job. Some objects may then be missing from the inventory or out of date.
- GlossaryScan interval
A scan interval is how often Rencore Governance aims to scan one object type, such as daily or weekly. The interval is a target, not a guarantee.
- GlossarySensitivity label
A sensitivity label is a Microsoft Purview classification, such as Confidential or Internal, that an organization applies to content and to containers such as…
- GlossaryThrottling
Throttling is how Microsoft 365 limits the requests an application or user can send in a period of time. Rencore Governance pauses scanning when it is…