Administrators without MFA
Shows administrators that have not activated multi-factor authentication
Out-of-the-box policies
The comprehensive compliance system
100+ ready-to-use policies across 6 Microsoft 365 services. Switch them on as they are, or use them as the starting point for your own.
Category
Service
Showing every policy
All compliance policies
Application registrations without owners
Shows Application registrations without any owners
Applications with certificates that are about to expire
Shows Entra ID applications where certificates expire in the next 30 days
Applications with client secrets that are about to expire
Shows Entra ID applications where client secrets expire in the next 30 days
Applications with expired certificates
Shows Entra ID applications with expired certificates
Applications with expired client secrets
Shows Entra ID applications with expired client secrets
Disabled user accounts
Shows all disabled user accounts
Disabled user accounts with assigned licences
Shows disabled user accounts which have any licences assigned
Enterprise applications (SharePoint Add-Ins) with certificates or client secrets
Shows Enterprise applications with certificates or client secrets. In most cases these applications are SharePoint Add-Ins
Enterprise applications (SharePoint Add-Ins) with expired certificates or client secrets
Shows Enterprise applications with expired certificates or client secrets. In most cases these applications are SharePoint Add-Ins
Enterprise applications that use Microsoft Graph permissions
Shows Entra ID apps that use Microsoft Graph permissions
Enterprise applications that use SharePoint Online permissions
Shows Enterprise applications that use SharePoint Online permissions
Enterprise Applications without owners
Shows Enterprise Applications without owners (excluding first-party Microsoft apps)
External users
Shows external users (users with user type 'Guest')
External users invited 3 months ago with pending acceptance
Shows external users invited more than 3 months ago that have not accepted invitation to the tenant
External Users with pending acceptance
External users which have not accepted invitation to your tenant
Global administrators without MFA
Shows global administrators that have not activated multi-factor authentication
Group found with fewer than two owners
Shows Groups which have fewer owners than a defined threshold (default 2 owners)
Group with too many members
Shows groups that have more members than the defined threshold
Group with too many owners
Shows groups that have more owners than the defined threshold
Groups with disabled user accounts
Shows groups with users (owners and members) that have disabled accounts
Groups with external owners
Shows groups that have external users as owners
Groups with external users
Shows groups that have external users
Guest users with a Dynamics license assigned
Shows guest users that have a Dynamics license assigned
Inactive external users
Shows external users that have not signed in for more than 6 months
Inactive internal users
Shows internal users that have not signed in for more than 6 months
Licences assigned to external users
Shows licences which are assigned to external users and could be removed or might be unnecessary
Licences assigned to inactive users
Shows licences assigned to users who have not signed in for the last 90 days
Licences with fewer than 10 units available
Shows licences with fewer than 10 units available to assign to users
Licences with too many units
Licences that have more than 10 units available
Licences with unused seats
Shows licences which have a high number of unused seats
License usage for Visio, Project and Power BI Pro
Shows units consumed for critical licences like Visio, Project and Power BI Pro
Over-licensed user accounts
User accounts that have more than one license assigned with overlapping apps
Risky Sign-Ins
Shows Sign-Ins with risk state "At Risk"
Unused Licences
Shows M365 licences with more enabled units than consumed units
Users with passwords not changed in last 6 months
Shows users that have not changed their password for more than 6 months
Users with Power Platform Premium License
Users with assigned Premium License for Power Platform (per user plan)
Large OneDrive Sites
Shows OneDrive Sites with more than 100 GB of data
OneDrive files shared with external users
Shows OneDrive files shared with external users
OneDrive with files belonging to disabled user accounts
Shows OneDrive files of disabled user accounts that still have data stored
OneDrives belonging to disabled user accounts
Shows OneDrives that belong to disabled user accounts
OneDrives near storage limit
Shows OneDrives using more than 90% of their available storage space
OneDrives with externally shared files
Shows OneDrives which contain at least one file that has been shared externally
Unused OneDrive files
Shows OneDrive files that are unmodified for more than 5 years
Power Apps (Canvas Apps) without Owners
Shows Power Apps with no Owners
Power Apps requiring a premium license
Shows Power Apps with premium connectors, custom connectors, common data service etc.
Complex Flows
Flows with many actions (default 20+), that might require additional documentation
Flows requiring a premium license
Shows Flows with premium connectors, premium actions or premium triggers (e.g. common data service)
Flows that use a specific connector
Shows Flows that use a specific connector (default Twitter)
Flows with errors
Shows Flows that have failed runs and might not function as intended
Flows with many runs in last 30 days
Shows flows with run count exceeding defined value (default 100 runs)
Flows without Owners
Shows Flows that have no Flow Owners
Flows without runs
Shows Flows that have never been used. Warning: Flows with runs that happened before the first flow scan occurred will not be found.
Long running Flows
Shows Flows that ran for a longer period (default 3 hours)
New Flows
Shows Flows created in the last defined number of days (default 30 days)
Stopped Flows
Shows Flows that have stopped
Stopped Flows Last Week with errors
Shows Flows that have stopped in the last week with errors
Unused Flows
Shows Flows created more than 30 days ago that haven't run in more than 180 days
Externally shared files
Shows files shared with external users
SharePoint Extranet Sites
Sites without MS Teams where External Sharing is active
SharePoint files shared with inactive external users
Shows SharePoint files which have been shared with external users that have not signed in for more than 6 months
SharePoint Libraries with disabled search
Shows SharePoint Libraries where search has been disabled
SharePoint lists/libraries with more than 5000 items/documents
Shows SharePoint lists or libraries with more than 5000 items or documents
SharePoint Site collections near storage limit
Shows SharePoint Site Collections using more than 90% of their available storage space
SharePoint site collections with disabled owners accounts
Shows SharePoint site collections that have any site owner account currently disabled
SharePoint Site Collections with external owners
Shows SharePoint Site Collections that have external users as owners
SharePoint site collections with fewer than 2 site owners
Shows SharePoint site collections that have fewer than 2 site owners
SharePoint Subsites with unique permissions
Shows SharePoint Subsites with unique role assignments
Site Collections near Subsite limit
Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection
Site Collections near the List/Library limit
Shows Site Collections that have nearly reached the List/Library limit of 2000 Lists/Libraries per Site Collection
Site Collections that reach the Subsite limit
Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection
Site Collections with Subsites
Shows all Site Collections that have subsites
Sites with disabled search
Shows SharePoint Sites where search has been disabled
Unused Classic sites
Shows classic SharePoint sites that are inactive
Unused SharePoint files
Shows SharePoint files that are unmodified for more than 5 years
Unused SharePoint Site collections with more than 1 GB
Shows sites which have not been used in last 90 days and are larger than 1 GB
Unused sites
Shows sites that didn't have activity for a defined period (default 90 days)
New Teams
Teams created in the last 14 days, e.g. to send onboarding information
Public Teams
Shows public teams
Teams that reach the 180 channel limit
Shows Teams that have more than 180 channels
Teams that reach the 80 owner limit
Shows Teams that have more than 80 owners
Teams that use prohibited words in the name or description
Shows teams that use a list of prohibited words in the name or description
Teams with a disabled owner account
Shows Teams that have at least one disabled owner account
Teams with external users
Shows all Teams that have external users/guests
Teams with fewer than 2 owners
Shows Teams with fewer than 2 owners
Teams with inactive external users
Shows teams with external members that have not logged in for more than 6 months
Teams with many channels
Shows Teams that have more than a certain number of channels (default 50)
Teams with many owners
Shows Teams that have more than a certain number of owners (default 10)
Teams with many users
Shows Teams with a number of users that exceeds a threshold (default 50 users)
Teams with only disabled owner accounts
Shows Teams where all owners have disabled accounts
Teams with private channels
Shows Teams with private channels
Teams with very few users
Shows Teams which have 1 or 2 users
Teams without owners
Shows Teams without any owners
No policies match those filters.