How to govern Microsoft 365
A step-by-step guide to governing Microsoft 365 with Rencore: detect with 31 policies, review with 22 reports, and remediate with 3 automations.
Governing Microsoft 365 means keeping its access, configuration, and lifecycle under continuous control rather than reacting after something breaks. Rencore governs Microsoft 365 with 31 pre-built policies, 22 reports, and 3 automations, so teams can detect risk, review posture, and remediate with an audit trail. The steps below turn that coverage into a repeatable routine.
Steps
-
Inventory Microsoft 365
Connect Microsoft 365 and let Rencore build a continuous inventory of its resources, owners, and configuration, so governance starts from what exists rather than a stale export.
-
Detect with policies
Turn on the pre-built policies that cover Microsoft 365 to surface oversharing, sprawl, and misconfiguration on the first scan, before writing a single custom rule.
-
Review by owner and severity
Use the Microsoft 365 reports to review findings by owner, category, and severity, and to share them with stakeholders who do not have a seat in the platform.
-
Remediate and automate
Apply automations to fix findings at scale, route sensitive changes through approvals, and keep every action reversible and logged for the audit trail.
Recommended Microsoft 365 policies
Grounded in the Rencore catalog. See the full Microsoft 365 catalog on the Microsoft 365 connector page.
-
Disabled user accounts
Shows all disabled user accounts
Severity: Medium -
Groups with disabled user accounts
Shows groups with users (owners and members) that have disabled accounts
Severity: Medium -
External users
Shows external users (users with user type 'Guest')
Severity: Information -
Groups with external users
Shows groups that have external users
Severity: Medium -
License usage for Visio, Project and Power BI Pro
Shows units consumed for critical licenses like Visio, Project and Power BI Pro
Severity: Medium -
Licenses assigned to disabled users
Shows licenses which are assigned to users with account enabled set to false
Severity: Medium -
Licenses assigned to external users
Shows licenses which are assigned to external users and could be removed or might unnecessary
Severity: Medium -
Licenses assigned to inactive users
Shows licenses which are users that have not signed in in last 90 days
Severity: Medium -
Licenses with unused seats
Shows licenses which have a high number of unused seats
Severity: Medium
