Microsoft 365 grows one service at a time, and nobody sees the whole
Every service has its own admin center, and each one stops at its own boundary. The questions you ask of one Team or one SharePoint site apply to the whole tenant.
Who owns what
Teams, sites, groups and apps pile up, and workspaces are left without an active owner. Nobody can say who answers for them.
Who can reach it
Sharing, guest access and permissions grow well beyond their original purpose. Content shared with external users is hard to see across services, and AI assistants can surface it.
What is left when people move on
Inactive teams and sites, guest accounts with pending or expired invitations and licences of disabled accounts collect quietly.
What it costs
Unassigned licences, unused Copilot seats and storage add to the bill, and the cost leaks in more than one service at once.
What Rencore sees and does across Microsoft 365
One inventory across every Microsoft 365 service
Rencore Governance puts every governed object in one inventory, so you can answer who created a workspace, who can reach it, what data it holds and who owns it without opening a separate admin center for each service.
- Users, groups and apps next to the objects of Teams, SharePoint, OneDrive, Exchange, Planner, Viva Engage and Entra ID
- Each service has its own connector with its own object types, linked below
- Findings are ranked by risk and cost
- Findings are as fresh as the last scan
Ownership and lifecycle by policy, not by ticket
Inactive teams and sites, guest accounts and workspaces without an owner surface as lifecycle findings instead of quietly accumulating. The owner is asked to confirm before anything is archived or removed, and the decision is recorded.
- Teams and site collections nobody has opened for the period you define
- Guest accounts with pending or expired invitations
- Workspaces left without an active owner
- An automated cleanup workflow can handle a finding once the owner has confirmed
Cost and compliance you can show an auditor
Rencore reports which Microsoft 365 licences are assigned, which are unassigned and which sit with disabled or inactive accounts, and shows the compliance of the tenant as one picture.
- Unused and unassigned licences, so seats are redistributed before more are bought
- Microsoft 365 Copilot is charged on top of your existing licences, so an unused seat is pure cost
- SharePoint and OneDrive storage, where cost tends to leak next
- Each policy has a severity and a trend, so the control shows as running
Where tenant-wide coverage stops
This page is the overview. The depth sits in the connector of each service, and some jobs stay with Microsoft.
Depth sits in the service connectors
The object types, policies and actions of Teams, SharePoint, OneDrive, Exchange, Planner, Viva Engage and Loop are described on their own pages.
Microsoft keeps its own jobs
Purview keeps classifying and labelling your data, and Entra keeps identity. Rencore makes what they produce visible and enforceable.
Scan-based, not real time
Findings come from scans, so the inventory is as current as the last scan.
Digital Workplace
Microsoft 365 questions, answered
Which Microsoft 365 services can Rencore see?
Microsoft 365, Teams, SharePoint, OneDrive, Exchange, Planner, Viva Engage and Entra ID today, as part of the Digital Workplace module. Everything lands in one inventory. Coverage beyond Microsoft is on the roadmap, not generally available.
How is this different from the Microsoft 365 admin centers, Purview and Entra?
Rencore complements and extends them. The native portals report each service on its own and stop at the service boundary. Rencore puts one inventory across services in front of you, ranks what it finds by risk and cost, then acts on it through policies, owner approvals and automated remediation. Purview keeps classifying and labelling your data, and Entra keeps identity.
Where do I find the detail for one service?
On the connector of that service: Teams, SharePoint, OneDrive, Exchange, Planner, Viva Engage and Loop. This page is the tenant-wide view above them.
How do we stop oversharing before Copilot surfaces it?
Start with the sharing picture. Rencore inventories permissions and sharing across SharePoint, OneDrive and Teams, and flags site collections with no sensitivity label, content shared with external users and access that has outgrown its purpose. Each finding is ranked by severity and routed to the workspace owner to confirm, or handled by an automated cleanup workflow.
Can we see which Microsoft 365 and Copilot licences are used?
Yes. Rencore reports which licences are assigned, which are unassigned and which sit with accounts that are disabled or have not signed in, so you can redistribute seats before buying more. The same reporting covers SharePoint and OneDrive storage.
Where does our data live, and which certifications does Rencore hold?
Rencore is a German company and Rencore Governance runs on Microsoft Azure. Data handling, processing and storage meet GDPR requirements, and Rencore is certified to SOC 2 Type 2, ISO 27001:2022 and ISO 27017. The audit reports are available to your security team on request.