Connector
Microsoft 365
Pages about the Microsoft 365 connector.
114 pages · All tags
Everything Rencore Governance covers for Microsoft 365 is on the Microsoft 365 connector page.
Getting started 2
- Getting startedAfter your first scan
After the first scan, check the inventory, turn on a first set of policies, fix one violation and add a first automation and dashboard.
- Getting startedSet up Rencore Governance
This guide sets up Rencore Governance from sign-in to your first scan: create a Workspace, connect your tenant and give consent.
Guides 6
- Guides › AutomationClean up after a leaver
Find accounts of people who left, with the licenses, workspaces and OneDrive content they still hold, and remove their access with actions or an automation.
- GuidesConnect a service
This guide turns on a Rencore Governance connector and gives it access, with notes for Power Platform, Azure, Foundry, Claude and ChatGPT.
- Guides › PoliciesFind and remove inactive guests
Find guest accounts that have not signed in for months or never accepted their invitation, then disable them or remove them from your workspaces.
- Guides › PoliciesFind sites and groups with missing sensitivity labels
Find SharePoint sites, Teams and Microsoft 365 groups with a missing or wrong sensitivity label, and set the right label on Microsoft 365 groups.
- Guides › PoliciesFix Workspaces without owners
Find Teams, groups and SharePoint sites with no owner, one owner or only disabled owners, then add an owner or ask someone to take over the workspace.
- Guides › ReportsSee who holds admin roles
List who holds each Entra ID directory role, directly or through a group, and get a violation for admins without MFA or holders that break your rule.
Concepts 1
Use cases 8
- Use cases › What do you want to do?Clean up after leavers
Find what people who left still own or hold, such as Teams, sites, OneDrives and licenses, and hand it over or remove it.
- Use cases › What do you want to do?Connect governance to your ticket system
Open a ticket in ServiceNow or another ticket system, or start a Power Automate flow, when a policy finds a violation or an automation runs.
- Use cases › What do you want to do?Delegate governance by country or subsidiary
Give a country, subsidiary or business unit its own view of the tenant, with admins who see and act only inside their scope.
- Use cases › What do you want to do?Govern guests and external users
See every guest in your tenant, find the ones who are inactive or never accepted their invitation, and remove their access.
- Use cases › What do you want to do?Keep every workspace owned
Find Teams, sites and groups with no owner, one owner or only disabled owners, and get a second owner in place.
- Use cases › What do you want to do?Recertify access with reviews
Ask workspace owners on a schedule to confirm who still needs access, and remove the people who do not.
- Use cases › What do you want to do?Reduce license and AI spend
Find Microsoft 365 and Copilot licenses nobody uses, and watch Copilot Studio consumption before it goes over your pay-as-you-go limit.
- Use cases › What do you want to do?Report and prove compliance
Show auditors and management what is in your tenant and how well it follows your policies, with reports, dashboards and exports.
Reference 91
- Reference › Review templatesAccess review for groups
A review of every Group. The Microsoft 365 review template "Access review for groups" in Rencore Governance.
- Reference › Policies › Microsoft 365Admin accounts with an Office 365 E3 license assigned
What the built-in Microsoft 365 policy "Admin accounts with an Office 365 E3 license assigned" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › Microsoft 365Administrators without MFA
Shows administrators that have not activated multi factor authentication. Built-in Microsoft 365 policy "Administrators without MFA".
- Reference › TeamsAll services
The inventory objects that members of the built-in All services team can see in Rencore Governance, grouped by connector.
- Reference › Inventories › Microsoft 365App
All Microsoft 365 apps included in your available subscriptions. Properties, relations and actions of the App object in the Microsoft 365 inventory.
- Reference › Automation actionsAutomation actions for Microsoft 365
The 50 actions Rencore Governance automations can run on Microsoft 365, with a description and category for each.
- Reference › AutomationsAutomations for Microsoft 365
The 4 automation templates Rencore Governance provides for Microsoft 365, with what each one does and the objects it applies to.
- Reference › ActionsBuilt-in actions for Microsoft 365
The 24 built-in actions you can run on Microsoft 365 objects in Rencore Governance, with what each one does and the objects it applies to.
- Reference › Inventories › Microsoft 365Deleted group
All groups that have been deleted from your tenant. Properties, relations and actions of the Deleted group object in the Microsoft 365 inventory.
- Reference › Inventories › Microsoft 365Deleted user
All users that have been deleted from your tenant. Properties, relations and actions of the Deleted user object in the Microsoft 365 inventory.
- Reference › Segments › Microsoft 365Disabled accounts
Shows all disabled users. The Microsoft 365 segment "Disabled accounts" in Rencore Governance.
- Reference › Policies › Microsoft 365Disabled room/place accounts
Shows rooms/places with disabled accounts. The built-in Microsoft 365 policy "Disabled room/place accounts": what it detects and the rule behind it.
- Reference › Policies › Microsoft 365Disabled user accounts
Shows all disabled user accounts. The built-in Microsoft 365 policy "Disabled user accounts": what it detects and the rule behind it.
- Reference › Policies › Microsoft 365Disabled user accounts with assigned licenses
Shows disabled user accounts which have any licenses assigned. Built-in Microsoft 365 policy "Disabled user accounts with assigned licenses".
- Reference › Reports › Microsoft 365Distribution groups
All active distribution groups. The Microsoft 365 report "Distribution groups" in Rencore Governance.
- Reference › Segments › Microsoft 365Distribution groups
All active distribution groups. The Microsoft 365 segment "Distribution groups" in Rencore Governance.
- Reference › Reports › Microsoft 365Email domains of external users
Shows the domains of external user emails to be able to configure allowed domains. Microsoft 365 report.
- Reference › TeamsEntra ID
The inventory objects that members of the built-in Entra ID team can see in Rencore Governance, grouped by connector.
- Reference › TeamsExchange
The inventory objects that members of the built-in Exchange team can see in Rencore Governance, grouped by connector.
- Reference › Policies › Microsoft 365External users
Shows external users (users with user type 'Guest'). The built-in Microsoft 365 policy "External users": what it detects and the rule behind it.
- Reference › Reports › Microsoft 365External users
Shows all external users. The Microsoft 365 report "External users" in Rencore Governance.
- Reference › Segments › Microsoft 365External users
Shows all external users. The Microsoft 365 segment "External users" in Rencore Governance.
- Reference › Policies › Microsoft 365External users invited 3 month ago with pending acceptance
What the built-in Microsoft 365 policy "External users invited 3 month ago with pending acceptance" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › Microsoft 365External users with pending acceptance
External users which have not accepted invitation to your tenant. Built-in Microsoft 365 policy "External users with pending acceptance".
- Reference › Policies › Microsoft 365Global administrators without MFA
Shows global administrators that have not activated multi factor authentication. Built-in Microsoft 365 policy "Global administrators without MFA".
- Reference › Inventories › Microsoft 365Group
All Entra ID groups in your Tenant (Security groups, Microsoft 365 groups). Properties and relations of the Group object.
- Reference › Policies › Microsoft 365Groups with disabled user accounts
Shows groups with users (owners and members) that have disabled accounts. Built-in Microsoft 365 policy "Groups with disabled user accounts".
- Reference › Policies › Microsoft 365Groups with external owners
Shows groups that have external users as owners. The built-in Microsoft 365 policy "Groups with external owners": what it detects and the rule behind it.
- Reference › Policies › Microsoft 365Groups with external users
Shows groups that have external users. The built-in Microsoft 365 policy "Groups with external users": what it detects and the rule behind it.
- Reference › Reports › Microsoft 365Groups with teams
All groups with Teams connected. The Microsoft 365 report "Groups with teams" in Rencore Governance.
Show all 91 pages
- Reference › Segments › Microsoft 365Groups with teams
All groups with Teams connected. The Microsoft 365 segment "Groups with teams" in Rencore Governance.
- Reference › Policies › Microsoft 365Groups with very few owners
Shows Groups which have fewer owners than defined threshold (default 2 owners). Built-in Microsoft 365 policy "Groups with very few owners".
- Reference › Policies › Microsoft 365Guest users with a Dynamics license assigned
Guest users with a Dynamics license assigned. Built-in Microsoft 365 policy "Guest users with a Dynamics license assigned".
- Reference › Policies › Microsoft 365Inactive external users
Shows external users that have not signed in for more than 6 month. Built-in Microsoft 365 policy "Inactive external users".
- Reference › Policies › Microsoft 365Inactive internal users
Shows internal users that have not signed in for more than 6 month. Built-in Microsoft 365 policy "Inactive internal users".
- Reference › Reports › Microsoft 365Internal users
Shows all internal users. The Microsoft 365 report "Internal users" in Rencore Governance.
- Reference › Segments › Microsoft 365Internal users
Shows all internal users. The Microsoft 365 segment "Internal users" in Rencore Governance.
- Reference › Policies › Microsoft 365License usage for Visio, Project and Power BI Pro
Shows units consumed for critical licenses like Visio, Project and Power BI Pro. The "License usage for Visio, Project and Power BI Pro" policy.
- Reference › Reports › Microsoft 365License usage for Visio, Project and Power BI Pro
Shows units consumed for critical licenses like Visio, Project and Power BI Pro. Microsoft 365 report.
- Reference › Reports › Microsoft 365Licenses assigned to disabled user accounts
Shows licenses which are assigned to users with account enabled set to false. Microsoft 365 report.
- Reference › Policies › Microsoft 365Licenses assigned to disabled users
Shows licenses which are assigned to users with account enabled set to false. Built-in Microsoft 365 policy "Licenses assigned to disabled users".
- Reference › Policies › Microsoft 365Licenses assigned to external users
Shows licenses which are assigned to external users and could be removed or might unnecessary. The "Licenses assigned to external users" policy.
- Reference › Reports › Microsoft 365Licenses assigned to external users
Shows licenses which are assigned to external users and could be removed or might unnecessary. Microsoft 365 report.
- Reference › Policies › Microsoft 365Licenses assigned to inactive users
Shows licenses which are users that have not signed in in last 90 days. Built-in Microsoft 365 policy "Licenses assigned to inactive users".
- Reference › Reports › Microsoft 365Licenses assigned to inactive users
Shows licenses which are users that have not signed in in last 90 days. The Microsoft 365 report "Licenses assigned to inactive users" in Rencore Governance.
- Reference › Policies › Microsoft 365Licenses with less than 10 units available
Shows licenses with less than 10 units available to assign to users. Built-in Microsoft 365 policy "Licenses with less than 10 units available".
- Reference › Policies › Microsoft 365Licenses with unused seats
Shows licenses which have a high number of unused seats. The built-in Microsoft 365 policy "Licenses with unused seats": what it detects and the rule behind it.
- Reference › Reports › Microsoft 365Licenses with unused seats
Shows licenses which have a high number of unused seats. The Microsoft 365 report "Licenses with unused seats" in Rencore Governance.
- Reference › Inventories › Microsoft 365Message Center message
All messages from the Microsoft 365 Message Center. Properties, relations and actions of the Message Center message object in the Microsoft 365 inventory.
- Reference › InventoriesMicrosoft 365
The 11 object types Rencore Governance collects for Microsoft 365, with what each one holds and how many properties it has.
- Reference › TeamsMicrosoft 365
The inventory objects that members of the built-in Microsoft 365 team can see in Rencore Governance, grouped by connector.
- Reference › ConnectorsMicrosoft 365
What Rencore Governance covers for Microsoft 365: 11 object types, 29 policies, 4 automations and 24 built-in actions, grouped by product area.
- Reference › Segments › Microsoft 365Microsoft 365 default
Shows all the users which are an owner or member of any Microsoft 365 group. A filter of the Rencore Teams App. Microsoft 365 segment.
- Reference › Reports › Microsoft 365Microsoft 365 groups
All active Microsoft 365 groups. The Microsoft 365 report "Microsoft 365 groups" in Rencore Governance.
- Reference › Segments › Microsoft 365Microsoft 365 groups
All active Microsoft 365 groups. The Microsoft 365 segment "Microsoft 365 groups" in Rencore Governance.
- Reference › Segments › Microsoft 365My membership
Shows all the users which are a member of any Microsoft 365 group. A filter of the Rencore Teams App. Microsoft 365 segment.
- Reference › Segments › Microsoft 365My ownership
Shows all the users which own any Microsoft 365 group. A filter of the Rencore Teams App. The Microsoft 365 segment "My ownership" in Rencore Governance.
- Reference › TeamsOneDrive
The inventory objects that members of the built-in OneDrive team can see in Rencore Governance, grouped by connector.
- Reference › Policies › Microsoft 365Over-licensed user accounts
User accounts that have more than one License assigned with overlapping apps. Built-in Microsoft 365 policy "Over-licensed user accounts".
- Reference › PoliciesPolicies for Microsoft 365
The 29 built-in policies Rencore Governance provides for Microsoft 365, with what each one checks, its severity and its category.
- Reference › TeamsPower Apps
The inventory objects that members of the built-in Power Apps team can see in Rencore Governance, grouped by connector.
- Reference › TeamsPower Automate
The inventory objects that members of the built-in Power Automate team can see in Rencore Governance, grouped by connector.
- Reference › Reports › Microsoft 365Private groups
All private groups. The Microsoft 365 report "Private groups" in Rencore Governance.
- Reference › Segments › Microsoft 365Private groups
All private groups. The Microsoft 365 segment "Private groups" in Rencore Governance.
- Reference › Provisioning templatesPrivate M365 group
The Private M365 group provisioning template for Microsoft 365 in Rencore Governance. Template for a private M365 group.
- Reference › Reports › Microsoft 365Public groups
All public groups. The Microsoft 365 report "Public groups" in Rencore Governance.
- Reference › Segments › Microsoft 365Public groups
All public groups. The Microsoft 365 segment "Public groups" in Rencore Governance.
- Reference › ReportsReports for Microsoft 365
The 18 report templates Rencore Governance provides for Microsoft 365, with the filter, chart type and object of each one.
- Reference › Inventories › Microsoft 365Rooms & equipment
All rooms and equipment configured in your tenant. Properties, relations and actions of the Rooms & equipment object in the Microsoft 365 inventory.
- Reference › Reports › Microsoft 365Security groups
All active security groups. The Microsoft 365 report "Security groups" in Rencore Governance.
- Reference › Segments › Microsoft 365Security groups
All active security groups. The Microsoft 365 segment "Security groups" in Rencore Governance.
- Reference › SegmentsSegments for Microsoft 365
The 13 segments that come with Microsoft 365 in Rencore Governance, with the rule and the object each one selects.
- Reference › Inventories › Microsoft 365Sensitivity label
All sensitivity labels configured in your tenant. Properties, relations and actions of the Sensitivity label object in the Microsoft 365 inventory.
- Reference › Inventories › Microsoft 365Service assignment
Details when a service or app has been assigned to the user. Properties, relations and actions of the Service assignment object in the Microsoft 365 inventory.
- Reference › Policies › Microsoft 365Service plans assigned in the last 4 weeks
Shows service plans assigned to users in the last 4 weeks. Built-in Microsoft 365 policy "Service plans assigned in the last 4 weeks".
- Reference › TeamsSharePoint
The inventory objects that members of the built-in SharePoint team can see in Rencore Governance, grouped by connector.
- Reference › Inventories › Microsoft 365Subscription
All subscriptions with their licenses available in your tenant. Properties, relations and actions of the Subscription object in the Microsoft 365 inventory.
- Reference › Reports › Microsoft 365Suspended/disabled subscriptions
All subscriptions that are not enabled. The Microsoft 365 report "Suspended/disabled subscriptions" in Rencore Governance.
- Reference › Segments › Microsoft 365Suspended/disabled subscriptions
All subscriptions that are not enabled. The Microsoft 365 segment "Suspended/disabled subscriptions" in Rencore Governance.
- Reference › TeamsTeams
The inventory objects that members of the built-in Teams team can see in Rencore Governance, grouped by connector.
- Reference › Policies › Microsoft 365Unused licenses
Shows M365 licenses with more enabled units than consumed units. The built-in Microsoft 365 policy "Unused licenses": what it detects and the rule behind it.
- Reference › Inventories › Microsoft 365User
All users registered in your tenant (internal, external). Properties, relations and actions of the User object in the Microsoft 365 inventory.
- Reference › Inventories › Microsoft 365User activity
Details when a Microsoft 365 service has been used the last time by a specific user. Properties and relations of the User activity object.
- Reference › Reports › Microsoft 365Users by region
Groups users by their country or region. The Microsoft 365 report "Users by region" in Rencore Governance.
- Reference › Reports › Microsoft 365Users by type
Groups users by their type. The Microsoft 365 report "Users by type" in Rencore Governance.
- Reference › Reports › Microsoft 365Users to be licensed with Rencore Governance
Used to calculate license costs for Rencore Governance. The Microsoft 365 report "Users to be licensed with Rencore Governance" in Rencore Governance.
- Reference › Policies › Microsoft 365Users who are creating Microsoft Loop Teams components
A list of users that are creating Microsoft Loop components in their OneDrive. The "Users who are creating Microsoft Loop Teams components" policy.
- Reference › Policies › Microsoft 365Users with E3 license not using Outlook in last 12 month
Show Users with E3 license not using Outlook in last 12 month. Built-in Microsoft 365 policy "Users with E3 license not using Outlook in last 12 month".
- Reference › Policies › Microsoft 365Users with passwords not changed in last 6 months
Shows users that have not changed their password for more than 6 months. Built-in Microsoft 365 policy "Users with passwords not changed in last 6 months".
- Reference › Policies › Microsoft 365Users with Power Platform Premium license
Users with assigned Premium License for Power Platform (per user plan). Built-in Microsoft 365 policy "Users with Power Platform Premium license".
- Reference › TeamsViva Engage
The inventory objects that members of the built-in Viva Engage team can see in Rencore Governance, grouped by connector.
Glossary 6
- GlossaryDeleted object
When you delete a user or a Microsoft 365 group, Microsoft Entra ID keeps it soft-deleted for 30 days. In that time you can restore it with its memberships.
- GlossaryLeaver
A leaver is someone who has left your organization but whose account may still hold licenses, workspaces, ownership and OneDrive content. Rencore Governance…
- GlossaryMicrosoft 365
Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps. The Microsoft 365 connector of Rencore Governance…
- GlossaryMicrosoft 365 group
A Microsoft 365 Group is the membership object behind many Microsoft 365 workspaces. It gives owners and members shared resources, such as a mailbox, a…
- GlossaryMultifactor authentication
Multifactor authentication asks a user for a second form of verification, such as a code on their phone or a fingerprint, in addition to the password.
- GlossarySecurity group
A security group is a Microsoft Entra group that gives a set of users access to resources. Unlike a Microsoft 365 group, it comes without a shared mailbox or…