Inventory Discovery

What “complete” means

Most governance tools inventory a subset, sites and teams but not channels; mailboxes but not redirect rules; workspaces but not API keys. The gaps are where governance violations hide. A tool that inventories sites but not their sharing links cannot detect oversharing. One that inventories Claude workspaces but not API keys cannot detect unrotated credentials.

Rencore’s 270 inventory types cover the surface area governance actually needs, not just the obvious objects but the relations, properties, and adjacent records that policies operate on.

How discovery runs

On initial connection, Rencore enumerates every inventory type for the connected service, a full discovery pass that builds the base inventory. From that point on, delta scanning maintains the inventory incrementally. New resources appear automatically; modifications are tracked; deletions are recorded with timestamps.

Beyond enumeration

Inventory is the data foundation; policies, reports, dashboards, and automations are what is built on top. A complete inventory enables policies that catch nuanced violations (e.g., “Claude users not linked to Entra ID who have admin role on workspaces older than 6 months”) that would be impossible without the cross-referenced object graph the inventory builds.