Microsoft 365
Inventory Microsoft 365 users, groups, licenses, devices, admin roles, conditional access and sign-in policies, mailbox rules, Teams, SharePoint, security alerts, and Copilot usage.
Questions you can answer 75
Each one is a saved query that ships with ConfigView, reading your Microsoft 365 data on your own server. Ask it in plain English, SQL, Slack or the API.
- Are any blocked AI apps still connected somewhere else?
- Which AI apps did we block in Slack that people still use?
- What AI tools has [email protected] connected?
- Show the AI apps that can reach [email protected]'s mail and files
- List every AI connection by tool and system
- What AI apps show up in Google, Microsoft, Slack and Okta?
- Which AI apps can read our Gmail, Drive or Calendar?
- Which AI apps can send email or edit files for our people?
- Which AI desktop apps are installed on our laptops?
- List AI apps found on managed Macs
- How many laptops have Claude or ChatGPT installed?
- Count managed laptops with each AI desktop app
- Do any suspended users still have AI tools connected?
- Which leavers still have AI apps with access to company data?
- What is connected to our apps over MCP?
- Which MCP servers and connectors are in use?
- Who has connected an AI assistant to Linear over MCP?
- How many people gave each AI tool access to company data?
- Which AI tool has access to the most people's data?
- Who has given AI tools permission to change company data?
- List people whose AI apps can send mail or edit Drive files
- How much of the company has given AI tools access to data?
- Give me the AI connections numbers at a glance
- Which AI tools are people using that IT never approved?
- What shadow AI is in use?
- Which AI tools have no Okta app?
- Which AI tools are we using?
- Which AI tools are connected to our company data?
- Show every AI tool in use and whether IT set it up in Okta
- Which systems is each user in?
- Show every email with a flag for Google, Okta, Microsoft, Kandji and Coda
- Who's in which identity sources?
- Give me an Intune vs CrowdStrike coverage matrix
- Which serials are in Intune only, CrowdStrike only, or both?
- Compare our Intune device list against CrowdStrike, serial by serial
- Which Intune devices don't have CrowdStrike?
- Find Intune-managed endpoints missing the CrowdStrike sensor
- Where is the EDR agent missing on our Microsoft-managed devices?
- Which Microsoft users have no matching Google account?
- Find M365 accounts with no matching Google Workspace user
- Who's in Microsoft but not in Google?
- Which Intune devices has Rapid7 never scanned?
- Find Intune endpoints with no Rapid7 vulnerability scan
- Are any of our Microsoft-managed laptops missing from Rapid7?
- Show the Intune tenant 2 vs CrowdStrike coverage matrix
- For our second Microsoft tenant, which serials are in Intune, CrowdStrike, or both?
- Which devices in our second Intune tenant are missing CrowdStrike?
- Find tenant 2 Intune machines with no CrowdStrike agent
- Which hosts Rapid7 scanned don't have CrowdStrike?
- Find Rapid7 assets with no CrowdStrike sensor
- Are there vulnerability-scanned machines missing our EDR agent?
- Which users exist in only one system?
- Find orphan accounts that appear in a single identity source
- Who shows up in just one of Google, Okta, Microsoft, Kandji or Coda?
- What devices are assigned to [email protected]?
- Show me every laptop and phone [email protected] has across Kandji, Okta and Intune
- Which machines does [email protected] have?
- Which systems have an account for [email protected]?
- Look up [email protected] across Google, Okta, Microsoft, Kandji and Coda
- Where does the email [email protected] show up?
- Find anyone named Jane in any of our directories
- Search every system for users whose name contains jane
- Is there someone called Jordan in Okta, Google or Microsoft?
- Who has a MacBookPro18 laptop?
- Find every MacBookPro18 device and who holds it
- Which users are on MacBookAir10 hardware and due for a refresh?
- Which people are connected to Claude?
- Who has connected Cursor or ChatGPT to their work account?
- List everyone connected to a given AI tool
- Which apps have users asked an admin to approve in Entra ID?
- Show me pending admin consent requests in Azure AD
- Who requested consent for a Microsoft app and was it approved or denied?
- List every device managed in Intune
- Which Intune devices are out of compliance?
- Show me Intune laptops with their serial numbers, owners and last sync
No Microsoft 365 questions match that yet. Try a shorter word.
What ConfigView collects from Microsoft 365 49
-
Users
Retrieve and manage Microsoft 365 Users information.
-
Groups
Retrieve and manage Microsoft 365 Groups information.
-
Groups Info
Retrieve and manage Microsoft 365 Groups Info information.
-
Apps
Retrieve and manage Microsoft 365 Apps information.
-
Apps Info
Retrieve and manage Microsoft 365 Apps Info information.
-
Devices
Retrieve and manage Microsoft 365 Devices information.
-
Enterprise Apps
Retrieve and manage Microsoft 365 Enterprise Apps information.
-
Managed Devices
Retrieve and manage Microsoft 365 Managed Devices information.
-
Subscriptions
Retrieve and manage Microsoft 365 Subscriptions information.
-
Organization
Retrieve and manage Organization information.
-
Domains
Retrieve and manage Domains information.
-
Directories
Resolve every Entra directory around this tenant - seeded, guest-derived and sign-in-derived - into its name, default domain and identity provider.
-
Authorization Policy
Retrieve and manage Authorization Policy information.
-
Authentication Methods Policy
Retrieve and manage Authentication Methods Policy information.
-
Security Defaults Policy
Retrieve and manage Security Defaults Policy information.
-
Cross-Tenant Access Policy
Retrieve and manage Cross-Tenant Access Policy information.
-
Conditional Access Policies
Retrieve and manage Conditional Access Policies information.
-
Named Locations
Retrieve and manage Named Locations information.
-
Guest Users
Retrieve and manage Guest Users information.
-
Directory Roles
Retrieve and manage Directory Roles information.
-
Role Assignments
Retrieve and manage Role Assignments information.
-
PIM Role Eligibility
Retrieve and manage PIM Role Eligibility information.
-
Subscribed SKUs
Retrieve and manage Subscribed SKUs information.
-
User License Details
Retrieve and manage User License Details information.
-
Mailbox Settings
Retrieve and manage Mailbox Settings information.
-
Inbox Message Rules
Retrieve and manage Inbox Message Rules information.
-
Calendars
List every calendar in each mailbox with its owner and sharing flags — calendar inventory only, no events.
-
User OneDrives
Retrieve and manage User OneDrives information.
-
SharePoint Sites
Retrieve and manage SharePoint Sites information.
-
SharePoint Site Permissions
Retrieve and manage SharePoint Site Permissions information.
-
Directory Audit Logs
Retrieve and manage Directory Audit Logs information.
-
Sign-In Logs
Retrieve and manage Sign-In Logs information.
-
Security Alerts
Retrieve and manage Security Alerts information.
-
Security Incidents
Retrieve and manage Security Incidents information.
-
Secure Scores
Retrieve and manage Secure Scores information.
-
Secure Score Control Profiles
Retrieve and manage Secure Score Control Profiles information.
-
Risky Users
Retrieve and manage Risky Users information.
-
Risk Detections
Retrieve and manage Risk Detections information.
-
User Authentication Methods
Retrieve and manage User Authentication Methods information.
-
Teams
Retrieve and manage Teams information.
-
Team Channels
Retrieve and manage Team Channels information.
-
Chats
Retrieve and manage Chats information.
-
Call Records
Retrieve and manage Call Records information.
-
Device Compliance Policies
Retrieve and manage Device Compliance Policies information.
-
Device Configurations
Retrieve and manage Device Configurations information.
-
M365 Copilot Usage (User Detail)
Per-user Microsoft 365 Copilot activity: the last date each licensed user used Copilot in Teams, Word, Excel, PowerPoint, Outlook and other apps.
-
M365 Copilot Usage (Summary)
Microsoft 365 Copilot adoption over the last 30 days: enabled versus active users, per app.
-
Admin Consent Requests
See which apps users asked an admin to approve — the requester, their written justification, the approve/deny verdict, and who reviewed it.
-
Admin Consent Request Policy
Whether the admin consent workflow is enabled, how long requests stay open, and who the designated reviewers are.