Entra ID

Find accounts of people who left, with the licenses, workspaces and OneDrive content they still hold, and remove their access with actions or an automation.

Automation Microsoft 365 Teams SharePoint OneDrive Copilot

List who holds each Entra ID directory role, directly or through a group, and get a violation for admins without MFA or holders that break your rule.

Reports Microsoft 365

Find what people who left still own or hold, such as Teams, sites, OneDrives and licenses, and hand it over or remove it.

Sprawl & Lifecycle Access & Sharing Microsoft 365 Teams SharePoint OneDrive Copilot

Show auditors and management what is in your tenant and how well it follows your policies, with reports, dashboards and exports.

Reports Dashboards Teams SharePoint OneDrive Exchange Microsoft 365

The inventory objects that members of the built-in All services team can see in Rencore Governance, grouped by connector.

Settings Azure Microsoft Foundry ChatGPT Enterprise Claude Enterprise Copilot Copilot Studio Exchange Microsoft 365 OneDrive Planner Power Apps Power Automate Power BI SharePoint Teams Viva Engage

All app roles in Entra ID. Properties, relations and actions of the App role object in the Entra ID inventory.

All app role assignments in Entra ID. Properties, relations and actions of the App role assignment object in the Entra ID inventory.

All Entra ID application registrations. Properties, relations and actions of the Application registration object in the Entra ID inventory.

Shows Application registrations without any owners. Built-in Entra ID policy "Application registrations without owners".

Shows Entra ID applications where certificates expire in the next 30 days. Built-in Entra ID policy "Applications with certificates that are about to expire".

Shows Entra ID applications where client secrets expire in the next 30 days. The "Applications with client secrets that are about to expire" policy.

Shows Entra ID applications with expired certificates. Built-in Entra ID policy "Applications with expired certificates".

Shows Entra ID applications with expired client secrets. Built-in Entra ID policy "Applications with expired client secrets".

All client secrets registered in Entra ID. Properties, relations and actions of the Client secret object in the Entra ID inventory.

Shows Sign-Ins using conditional access. The Entra ID report "Conditional access sign-ins" in Rencore Governance.

Shows Sign-Ins using conditional access. The Entra ID segment "Conditional access sign-ins" in Rencore Governance.

All deleted applications client secrets registered in Entra ID. Properties and relations of the Deleted app client secret object.

All deleted application registration certificate of Entra ID. Properties and relations of the Deleted app registration certificate object.

All deleted applications registration in Entra ID. Properties, relations and actions of the Deleted application registration object in the Entra ID inventory.

All verified publishers of deleted applications in Entra ID. Properties and relations of the Deleted application verified publisher object.

All devices (computers, phones) that are registered in Entra ID. Properties, relations and actions of the Device object in the Entra ID inventory.

Shows devices with disabled owners or user accounts. The built-in Entra ID policy "Devices with disabled user accounts": what it detects and the rule behind it.

All directory roles registered in Entra ID. Properties, relations and actions of the Directory role object in the Entra ID inventory.

All registered domains in Entra ID. Properties, relations and actions of the Domain object in the Entra ID inventory.

All enterprise applications client secrets registered in Entra ID. Properties and relations of the Enterprise app client secret object.

All registered Enterprise Applications in Entra ID. Properties, relations and actions of the Enterprise application object in the Entra ID inventory.

All enterprise application OAuth2 permission scopes in Entra ID. Properties and relations of the Enterprise application OAuth2 permission scope object.

All verified publishers of enterprise applications in Entra ID. Properties and relations of the Enterprise application verified publisher object.

What the built-in Entra ID policy "Enterprise applications (SharePoint add-ins) with certificates or client secrets" detects, and the rule behind it.

What the built-in Entra ID policy "Enterprise applications (SharePoint add-ins) with expired certificates or client secrets" detects, and the rule behind it.

Shows Entra ID apps that use Microsoft Graph permissions. Built-in Entra ID policy "Enterprise applications that use Microsoft Graph permissions".

Shows Enterprise applications that use SharePoint Online permissions. Built-in Entra ID policy "Enterprise applications that use SharePoint Online permissions".

What the built-in Entra ID policy "Enterprise applications using Exchange Web Services (EWS)" in Rencore Governance detects, and the rule behind it.

What the built-in Entra ID policy "Enterprise applications with full control or write permissions" in Rencore Governance detects, and the rule behind it.

Microsoft has four types of users: internal members, external members, internal guests and external guests. Rencore Governance tells them apart by whether the…

An app registration is the global definition of an application in Microsoft Entra ID. It holds the app's identity, its credentials and the API permissions it…

A client secret is a password-like string that an app registration uses to prove its identity when it requests a token from Microsoft Entra ID.

A directory role is a Microsoft Entra admin role, such as Global Administrator or Teams Administrator, that grants a set of permissions across the tenant.

An enterprise application is the local instance of an app in a Microsoft Entra tenant, its service principal, where admins control who can sign in and which…

An external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.

Global Administrator is the Microsoft Entra admin role with access to every administrative feature in the tenant, including giving admin consent to apps for…

A leaver is someone who has left your organization but whose account may still hold licenses, workspaces, ownership and OneDrive content. Rencore Governance…

Automation Microsoft 365 OneDrive

Microsoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant. Rencore Governance registers its…

Multifactor authentication asks a user for a second form of verification, such as a code on their phone or a fingerprint, in addition to the password.

Security & Privacy Microsoft 365