# Rencore Documentation > Public product documentation for Rencore Governance: take control of AI and the data it depends on across the Digital Workplace, Apps, Automation and BI, and AI & Agents modules. Rencore Governance is a software-as-a-service product from Rencore. It scans Microsoft 365, Power Platform, Azure and AI services such as Microsoft 365 Copilot, keeps an inventory of what it finds, and lets you set policies, automations and reviews on it. How to use this index: - Links in the first sections point at the Markdown version of each page (the page URL plus `.md`). The HTML page is the same URL without `.md`. - https://docs.rencore.com/llms-full.txt holds the full Markdown text of every page in the sections above "Optional", in one file. - A service marked (Preview) is not generally available yet. A deprecated page describes a feature that is being retired and names its replacement. - The "Optional" section lists the generated reference: one page per inventory object, policy, automation, role, team and permission, rebuilt from the product with every release. ## Concepts - [Built-in actions, automations and automation actions](https://docs.rencore.com/governance/concepts/actions-and-automations.md): Built-in actions, automations and automation actions all change objects in Rencore Governance, but each one is started and used differently. - [Connectors, modules and preview](https://docs.rencore.com/governance/concepts/connectors-and-preview.md): A connector links Rencore Governance to one service, connectors are grouped in three modules, and Preview ones are not yet generally available. - [Hosting (SaaS)](https://docs.rencore.com/governance/concepts/hosting/saas.md): Rencore hosts Rencore Governance as SaaS in the Azure data center you choose, and you grant it permission to scan your tenant. - [Inventory and scanning](https://docs.rencore.com/governance/concepts/inventory-and-scanning.md): The inventory holds every object Rencore Governance scans, continuous and partial scanning keep it current, and segments filter it. - [Policies and violations](https://docs.rencore.com/governance/concepts/policies-and-violations.md): Rencore Governance policies turn governance rules into violations, rated by severity, grouped by category and summed up as a compliance score. - [Provisioning](https://docs.rencore.com/governance/concepts/provisioning.md): Provisioning in Rencore Governance creates new Teams, SharePoint sites and other workspaces from templates, requests and approvals. - [Reports and dashboards](https://docs.rencore.com/governance/concepts/reports-and-dashboards.md): Reports show inventory data as charts, lists and KPIs, and dashboards group reports and policies as tiles you share with stakeholders. - [Reviews](https://docs.rencore.com/governance/concepts/reviews.md): In Rencore Governance Reviews, workspace owners confirm access in schedules, cycles and object reviews, replacing the deprecated Access feature. - [Roles and teams](https://docs.rencore.com/governance/concepts/roles-and-teams.md): In Rencore Governance, roles grant permissions and teams grant access to connector data, with four built-in roles and custom ones. - [Workspaces and Environments](https://docs.rencore.com/governance/concepts/workspaces-and-environments.md): A Rencore Governance Workspace holds one Environment, your connected tenant, which Virtual Environments can split into smaller parts. ## Getting started - [After your first scan](https://docs.rencore.com/governance/getting-started/after-your-first-scan.md): After the first scan, check the inventory, turn on a first set of policies, fix one violation and add a first automation and dashboard. - [Connect a service](https://docs.rencore.com/governance/getting-started/connect-a-service.md): This guide turns on a Rencore Governance connector and gives it access, with notes for Power Platform, Azure, Foundry, Claude and ChatGPT. - [Get help](https://docs.rencore.com/governance/getting-started/getting-help/get-help.md): The support channels for Rencore Governance: the service status page, live chat, in-app feedback, email and the Support Portal, and when to use each. - [Getting help](https://docs.rencore.com/governance/getting-started/getting-help.md): Where to find help with Rencore Governance, from a quick answer to a full support ticket. - [Access the Rencore Support Portal](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/access-rencore-support-portal.md): The Rencore Support Portal provides customers with a central location to create, manage, and track support requests related to Rencore products and services. - [Update a support ticket](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/accessing-and-updating-support-tickets.md): How to add information to a support ticket you already submitted, by replying from the Rencore Support Portal or from the ticket notification email. - [Create a support conversation](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/create-a-support-conversation.md): How to create a support conversation in the Rencore Support Portal, with the subject, service, customer impact and the details the support team needs. - [Create a Support Portal account](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/create-a-support-portal-account.md): How to sign up for a Rencore Support Portal account at support.rencore.com and activate it, so you can raise and track support requests. - [Support Portal](https://docs.rencore.com/governance/getting-started/getting-help/support-portal.md): How to create a Support Portal account and use it to raise and track support conversations. - [Access company support conversations](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/request-the-ability-to-view-all-support-conversations-for-your-company.md): How to ask Rencore support to let selected users see every support conversation raised by anyone in your company, not only their own. - [Reset your Support Portal password](https://docs.rencore.com/governance/getting-started/getting-help/support-portal/resetting-support-portal-account-password.md): How to reset the password of your Rencore Support Portal account, or set one if you emailed support but never signed in. - [Introduction](https://docs.rencore.com/governance/getting-started/introduction.md): Rencore Governance inventories your digital workplace, apps, automations and AI agents, shows what each one can reach, and applies the rules they follow. - [SharePoint and OneDrive scanning performance](https://docs.rencore.com/governance/getting-started/notifications/enhanced-sharepoint-and-onedrive-scanning-performance.md): Rencore Governance splits SharePoint and OneDrive scans into base jobs and files and folders jobs, and adds a new app for OneDrive files. - [Enterprise automation notifications](https://docs.rencore.com/governance/getting-started/notifications/enterprise-automation-notifications.md): Changes to automations in Rencore Governance: scheduled automations run on their own schedule and policy violation automations trigger until fixed. - [Notifications](https://docs.rencore.com/governance/getting-started/notifications.md): Notices about new Rencore Governance features and changes to scanning behavior. - [Progressive scanning](https://docs.rencore.com/governance/getting-started/notifications/progressive-scanning.md): A 2025 notice: progressive scanning brings results into Rencore Governance while a scan is still running. It is now how every scan works. - [Reconsent for sensitivity label scanning](https://docs.rencore.com/governance/getting-started/notifications/reconsent-required-for-microsoft-365-sensitivity-label-scanning.md): Microsoft changed the API for sensitivity labels, so every connected Microsoft 365 tenant must reconsent for Rencore Governance to keep scanning them. - [Product basics](https://docs.rencore.com/governance/getting-started/product-basics.md): An overview of how Rencore Governance works, from connecting a tenant to acting on what it finds, with links to a concept page for each part. - [Set up Rencore Governance](https://docs.rencore.com/governance/getting-started/quick-start.md): This guide sets up Rencore Governance from sign-in to your first scan: create a Workspace, connect your tenant and give consent. - [Add-ons](https://docs.rencore.com/governance/getting-started/rencore-governance-add-ons.md): Add-on modules and add-ons extend your Rencore Governance Plan. The optional ones are activated per Environment on request. ## Guides - [Approve access reviews (Deprecated)](https://docs.rencore.com/governance/guides/access/approving-access-reviews.md): How to open an Access Review in Rencore Governance, check the objects it lists and approve or reject each one. Access Reviews are deprecated. - [Create an access review report (Deprecated)](https://docs.rencore.com/governance/guides/access/create-an-access-review-report.md): How to add an Access Review from the Access Review Template Library in Rencore Governance, filtered by service and category. Access Reviews are deprecated. - [Export an access review (Deprecated)](https://docs.rencore.com/governance/guides/access/export-an-access-review.md): Rencore Governance enables the sharing of Access Reviews across Workspaces and Environments. Here's a guide on how to export an Access Review. - [Import an access review (Deprecated)](https://docs.rencore.com/governance/guides/access/import-an-access-review.md): Rencore Governance lets you transfer Access Reviews across Workspaces and Environments. - [Access (Deprecated)](https://docs.rencore.com/governance/guides/access.md): Access Reviews in Rencore Governance, a deprecated feature that is separate from the Reviews module: how to create, approve, export and import them. - [Change the Azure Subscription Plan](https://docs.rencore.com/governance/guides/account-and-subscription/change-azure-subscription-plan.md): How to change the Plan of your Rencore Governance Azure Marketplace subscription. Plans do not change on their own when your number of users changes. - [Connect an Azure Marketplace Subscription](https://docs.rencore.com/governance/guides/account-and-subscription/creating-and-connecting-azure-marketplace-subscription.md): In order to stay in control of Microsoft 365 with the Rencore Governance Azure Marketplace App, you will first need to sign in. - [Account & Subscription](https://docs.rencore.com/governance/guides/account-and-subscription.md): Manage your Rencore Governance Azure Marketplace subscription and account settings. - [Archive or unarchive a team with an automation](https://docs.rencore.com/governance/guides/automation/actions/automation-action-archive-or-unarchive-a-team.md): How to add the Archive or Unarchive a Team action to an automation, and how the Archive Unused Teams template uses it. - [Delete a Claude project](https://docs.rencore.com/governance/guides/automation/actions/automation-action-delete-a-claude-project.md): This automation action permanently deletes a Claude project, including its custom instructions and knowledge documents, through the Anthropic Compliance API. - [Remove SharePoint file versions](https://docs.rencore.com/governance/guides/automation/actions/automation-action-remove-sharepoint-file-versions.md): An automation action that deletes older versions of a SharePoint file, keeping the current version plus the number of major and minor versions you choose. - [Send a Teams notification for policies](https://docs.rencore.com/governance/guides/automation/actions/configure-a-teams-notification-for-rencore-governance-checks.md): How to post a message to a Teams channel from a Rencore Governance automation with an incoming webhook. - [Create ServiceNow tickets with an automation](https://docs.rencore.com/governance/guides/automation/actions/configure-service-now-ticket-creation.md): How to create ServiceNow incidents from a Rencore Governance automation that calls the ServiceNow REST API. - [Actions](https://docs.rencore.com/governance/guides/automation/actions.md): Set up specific automation actions, such as Teams notifications, ServiceNow tickets, webhooks and archiving teams. - [Trigger a webhook for Power Automate](https://docs.rencore.com/governance/guides/automation/actions/trigger-a-webhook-for-microsoft-power-automate.md): How to trigger a Power Automate flow or another external webhook from a Rencore Governance automation with Send HTTP request or Trigger webhook. - [Add an automation](https://docs.rencore.com/governance/guides/automation/add-an-automation.md): How to add an automation in Rencore Governance, directly from a policy or from the Automation page. - [Archive inactive SharePoint sites](https://docs.rencore.com/governance/guides/automation/archive-inactive-sharepoint-sites.md): Find SharePoint sites nobody has used for months, ask the owners if they still need them, and set the unused ones to read-only or archive them. - [View automation batches](https://docs.rencore.com/governance/guides/automation/automation-batch-page.md): The Automation Batch Page groups all runs of one automation by the time they were triggered, so you can see what each batch did and spot errors. - [Clean up after a leaver](https://docs.rencore.com/governance/guides/automation/clean-up-after-a-leaver.md): Find accounts of people who left, with the licenses, workspaces and OneDrive content they still hold, and remove their access with actions or an automation. - [Clean up redundant, obsolete and trivial content](https://docs.rencore.com/governance/guides/automation/clean-up-redundant-obsolete-and-trivial-content.md): Find old, unused and trivial files in SharePoint and OneDrive before a Copilot rollout, then archive the files or the Teams and sites that hold them. - [Create an automation summarized by policy](https://docs.rencore.com/governance/guides/automation/create-a-automation-summarized-by-policy.md): How to set up an automation that runs once per related object for a policy that is summarized by that object, instead of once per violation. - [Create a custom automation](https://docs.rencore.com/governance/guides/automation/create-a-custom-automation.md): How to build an automation from scratch in Rencore Governance: choose a trigger, then add steps such as an email, a Teams message or a Power Automate flow. - [Create an automation from a template](https://docs.rencore.com/governance/guides/automation/create-an-automation-from-a-template.md): How to add an automation from the Automations Template Library in Rencore Governance, then adjust its trigger, steps and settings before you save it. - [Export an automation](https://docs.rencore.com/governance/guides/automation/export-an-automation.md): How to export an automation from Rencore Governance as a file, so you can import it into another Workspace or Environment. - [Import an automation](https://docs.rencore.com/governance/guides/automation/import-an-automation.md): How to import an automation file into Rencore Governance, for example one exported from another Workspace or Environment. - [Automation](https://docs.rencore.com/governance/guides/automation.md): Automations in Rencore Governance run steps such as sending an email or disabling a user account when a trigger fires, for example a policy violation. - [Trigger a manual automation](https://docs.rencore.com/governance/guides/automation/trigger-a-manual-automation.md): How to run an automation with a manual trigger on an object from the Rencore Governance inventory, for one object or several at once. - [Troubleshoot automation errors](https://docs.rencore.com/governance/guides/automation/troubleshooting-automation-errors.md): How to find out why an automation failed: open its Automation Batch Page, find the batch in error and read the details of each failed run. - [Choose a trigger for an automation](https://docs.rencore.com/governance/guides/automation/what-are-the-available-triggers-for-automations.md): The triggers that can start an automation in Rencore Governance, such as manually, on a schedule or on a policy violation, and when to use each one. - [Add tiles to a dashboard](https://docs.rencore.com/governance/guides/dashboard/add-tiles-to-a-dashboard.md): How to add tiles to a Rencore Governance Dashboard, either to a built-in one or to a Dashboard you created, from the tile library. - [Create a dashboard](https://docs.rencore.com/governance/guides/dashboard/create-a-dashboard.md): How to create your own Dashboard in Rencore Governance, from a preconfigured template or a blank one, and choose the tiles it shows. - [Export a dashboard](https://docs.rencore.com/governance/guides/dashboard/export-a-dashboard.md): How to export a Rencore Governance Dashboard, with its custom tiles and policies, so you can share it with another Workspace. - [Import a dashboard](https://docs.rencore.com/governance/guides/dashboard/import-a-dashboard.md): How to import a Dashboard file into Rencore Governance, with its custom tiles and policies, for example one exported from another Workspace. - [Dashboard](https://docs.rencore.com/governance/guides/dashboard.md): Rencore Governance allows you to group your content from reports, inventory, and policies into dashboards tailored to various stakeholders in your organization. - [Share a dashboard](https://docs.rencore.com/governance/guides/dashboard/share-dashboard.md): How to share a Rencore Governance Dashboard by email, once or on a schedule, with an optional PDF attachment. - [Restrict built-in actions for a role](https://docs.rencore.com/governance/guides/inventory/built-in-actions/action-permissions.md): Any user can run built-in actions by default. How to restrict which built-in actions the users of a role can run in Rencore Governance. - [Delete a Claude project from the inventory](https://docs.rencore.com/governance/guides/inventory/built-in-actions/delete-a-claude-project-from-the-inventory.md): Use the Delete Project built-in action to permanently delete one or more Claude projects directly from the Anthropic Inventory. - [Run a built-in action](https://docs.rencore.com/governance/guides/inventory/built-in-actions/executing-an-action.md): How to run a built-in action on one inventory object or on several at once, from the details view or from a data grid in Rencore Governance. - [Built-in actions](https://docs.rencore.com/governance/guides/inventory/built-in-actions.md): Run one-click changes, such as archiving a team or removing a sharing link, on objects you select in the inventory. - [Create a segment](https://docs.rencore.com/governance/guides/inventory/create-a-segment.md): How to create an inventory segment in Rencore Governance with the Segment Builder: choose the object, set the logic and name the segment. - [Create a segment from a report](https://docs.rencore.com/governance/guides/inventory/create-segment-from-a-report.md): How to turn a report into an inventory segment in Rencore Governance. The Segment Builder opens with the report's logic and details filled in. - [Connect a data source for custom metadata](https://docs.rencore.com/governance/guides/inventory/custom-metadata/connect-a-data-source-for-custom-metadata.md): Keep a Custom Object or a Custom Property current automatically from a SharePoint file or library, refreshed on a schedule or on demand. - [Create a custom object](https://docs.rencore.com/governance/guides/inventory/custom-metadata/create-a-custom-object.md): How to create a Custom Object, an inventory of your own such as cost centers or project codes that other objects can relate to. - [Create a custom property](https://docs.rencore.com/governance/guides/inventory/custom-metadata/create-a-custom-property.md): How to add a Custom Property to an inventory object in Rencore Governance, for example a cost center field on a Team or a User. - [Create a custom relation](https://docs.rencore.com/governance/guides/inventory/custom-metadata/create-a-custom-relation.md): How to create a Custom Relation that links an object to one instance of another object, for example a Team to its cost center. - [Custom metadata](https://docs.rencore.com/governance/guides/inventory/custom-metadata.md): Custom Metadata adds your own fields, such as cost centers and project codes, to the inventory for use in Policies, Reports, Provisioning and Automations. - [Manage your metadata](https://docs.rencore.com/governance/guides/inventory/custom-metadata/manage-your-metadata.md): Manage your metadata lists every Custom Property, Custom Relation, Custom Object and data source of your Environment in one grid, by service. - [Use custom metadata in policies and reports](https://docs.rencore.com/governance/guides/inventory/custom-metadata/use-custom-metadata-in-policies-and-reports.md): How to use Custom Properties and Custom Relations in the Segment, Report and Policy builders to filter, group and total by your own fields. - [Export a segment](https://docs.rencore.com/governance/guides/inventory/export-a-segment.md): How to export an inventory segment from Rencore Governance as a file, so you can import it into another Workspace or Environment. - [Import a segment](https://docs.rencore.com/governance/guides/inventory/import-a-segment.md): How to import an inventory segment file into Rencore Governance, for example one exported from another Workspace or Environment. - [Inventory](https://docs.rencore.com/governance/guides/inventory.md): The inventory lists every object Rencore Governance scans, grouped by connector, and is where you search, filter and act on those objects. - [Remove a segment](https://docs.rencore.com/governance/guides/inventory/remove-a-segment.md): How to remove an inventory Segment you no longer need from Rencore Governance. - [Update monthly license costs](https://docs.rencore.com/governance/guides/inventory/update-monthly-license-costs.md): How to set the monthly license cost of your subscriptions in Rencore Governance by exporting the editable column, filling it in and importing it. - [Create a policy from a report](https://docs.rencore.com/governance/guides/policies/create-a-policy-from-a-report.md): How to turn a report into a policy in Rencore Governance. The Policy Builder opens with the report's logic and details filled in. - [Create a policy from a template](https://docs.rencore.com/governance/guides/policies/create-a-policy-from-a-template.md): How to add a policy from the Policy Template Library in Rencore Governance, filtered by service, category and severity, and adjust it before saving. - [Create a custom policy](https://docs.rencore.com/governance/guides/policies/creating-a-custom-policy.md): How to build a custom policy in Rencore Governance with the Policy Builder: choose the object, set the logic, then name the policy and set its severity. - [Export policies](https://docs.rencore.com/governance/guides/policies/export-policies.md): How to export a policy from Rencore Governance as a file, so you can import it into another Workspace or Environment. - [Find agents nobody owns](https://docs.rencore.com/governance/guides/policies/find-agents-nobody-owns.md): Find Copilot Studio agents without an active owner or with no use for months, then give them a new owner, quarantine them or delete them. - [Find agents that answer from public websites](https://docs.rencore.com/governance/guides/policies/find-agents-that-answer-from-public-websites.md): Find Copilot Studio agents and Copilot connections that use public websites as knowledge, so you can review the source or change the agent before it answers. - [Find and fix oversharing](https://docs.rencore.com/governance/guides/policies/find-and-fix-oversharing.md): Find files, sites and Teams that are shared beyond their audience with a report and policies, then remove the sharing or let the owners clean it up. - [Find and remove inactive guests](https://docs.rencore.com/governance/guides/policies/find-and-remove-inactive-guests.md): Find guest accounts that have not signed in for months or never accepted their invitation, then disable them or remove them from your workspaces. - [Find sites and groups with missing sensitivity labels](https://docs.rencore.com/governance/guides/policies/find-sites-and-groups-with-missing-sensitivity-labels.md): Find SharePoint sites, Teams and Microsoft 365 groups with a missing or wrong sensitivity label, and set the right label on Microsoft 365 groups. - [Find sites close to their storage quota](https://docs.rencore.com/governance/guides/policies/find-sites-close-to-their-storage-quota.md): See SharePoint and OneDrive storage against quota, get a violation before a site or OneDrive is full, and warn the owners or change the quota. - [Fix Workspaces without owners](https://docs.rencore.com/governance/guides/policies/fix-workspaces-without-owners.md): Find Teams, groups and SharePoint sites with no owner, one owner or only disabled owners, then add an owner or ask someone to take over the workspace. - [Govern Power BI Workspaces and guest access](https://docs.rencore.com/governance/guides/policies/govern-power-bi-workspaces-and-guest-access.md): Find Power BI workspaces without administrators, with external access or with no activity, and report on content that nobody uses or that has no label. - [Import policies](https://docs.rencore.com/governance/guides/policies/import-policies.md): How to import a policy file into Rencore Governance, for example one exported from another Workspace or Environment. - [Policies](https://docs.rencore.com/governance/guides/policies.md): Policies let you define governance rules in Rencore Governance and apply them across your scanned content, either from a template or built from scratch. - [Track Copilot Studio agent consumption](https://docs.rencore.com/governance/guides/policies/track-copilot-studio-agent-consumption.md): See what Copilot Studio pay-as-you-go Plans consume, get a violation when a Plan goes over its limit, and act on the agents that cause the spend. - [Create a provisioning request](https://docs.rencore.com/governance/guides/provisioning/create-a-provisioning-request.md): How to request a new Team in Rencore Governance from a Provisioning Template, then fill in its settings, owners and members before you submit. - [Create a suggested Teams channel](https://docs.rencore.com/governance/guides/provisioning/create-a-suggested-teams-channels.md): How to add a predefined Teams channel that Provisioning Templates can suggest when someone requests a new Team in Rencore Governance. - [Create your own provisioning templates](https://docs.rencore.com/governance/guides/provisioning/create-your-own-provisioning-templates.md): Build your own provisioning templates: change a library template, import one from another Workspace, or add a PnP template to a team or site template. - [Create a provisioning team template](https://docs.rencore.com/governance/guides/provisioning/creating-a-provisioning-team-template.md): How to create a Provisioning Template for Teams in Rencore Governance from the Provisioning Template Library, and set what each new Team gets. - [Enable or disable a provisioning template](https://docs.rencore.com/governance/guides/provisioning/enable-or-disable-a-provisioning-template.md): How to switch a Provisioning Template on or off in Rencore Governance, for one template or for several at once, so users can or cannot request from it. - [Export a provisioning template](https://docs.rencore.com/governance/guides/provisioning/export-a-provisioning-template.md): How to export a Provisioning Template from Rencore Governance as a .provisioning file, to share it with another Workspace or Environment. - [Import a provisioning template](https://docs.rencore.com/governance/guides/provisioning/import-a-provisioning-template.md): How to import a Provisioning Template into Rencore Governance from a .provisioning file exported from another Workspace or Environment. - [Provisioning](https://docs.rencore.com/governance/guides/provisioning.md): Let people request new teams, sites, groups, Planner plans and Viva Engage communities from provisioning templates you control. - [Check provisioning naming limits](https://docs.rencore.com/governance/guides/provisioning/limitations-to-provisioning-naming-conventions.md): The characters Microsoft allows in the names, descriptions and mail nicknames of Teams, groups and sites that you provision with Rencore Governance. - [Use a PnP provisioning template](https://docs.rencore.com/governance/guides/provisioning/using-a-pnp-provisioning-template.md): How to use a Microsoft PnP provisioning template in Rencore Governance, so Teams and sites you provision get the lists, pages and settings it defines. - [Approve access reviews in Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/access/approving-access-reviews.md): How to approve or reject the objects in an Access Review assigned to you in Rencore Nova, the deprecated Teams app. Use the Rencore Teams App instead. - [Access (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/access.md): The Access section of Rencore Nova, the deprecated Teams app, where reviewers approve Access Reviews. The Rencore Teams App replaces Rencore Nova. - [Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova.md): Rencore Nova shows Rencore Governance content in Microsoft Teams to users without Rencore Governance access. It is deprecated; use the Rencore Teams App. - [Install Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/install-rencore-nova.md): How a Workspace Owner installs the Rencore Nova Teams app from the Teams admin center. Rencore Nova is deprecated and replaced by the Rencore Teams App. - [Integrate Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/integrating-rencore-nova.md): To integrate Rencore Nova into your MS Teams, you will need to be a Workspace Owner. - [Provisioning (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/provisioning.md): How to request a new team from a provisioning template in Rencore Nova, the deprecated Teams app. Use the Rencore Teams App for new requests. - [Request provision of a team (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/provisioning/request-provision-of-a-team.md): How to request a new Team from a Provisioning Template in Rencore Nova, the deprecated Teams app, in four steps from basic settings to review. - [Troubleshoot Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/troubleshooting.md): Fixes for Rencore Nova messages such as "Rencore Governance not found" and "Connection to Rencore Nova failed". Rencore Nova is deprecated. - [Update Rencore Nova (Deprecated)](https://docs.rencore.com/governance/guides/rencore-nova/update-rencore-nova.md): How to update the Rencore Nova Teams app with a new manifest file in the Teams admin center. Rencore Nova is deprecated; use the Rencore Teams App. - [Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app.md): The Rencore Teams App brings Microsoft 365 governance into Microsoft Teams: manage and request workspaces, handle approvals and complete reviews. - [Open the Rencore Teams App and find your way around](https://docs.rencore.com/governance/guides/rencore-teams-app/accessing-and-navigating-rencore-teams-app.md): How to open the Rencore Teams App in Microsoft Teams and navigate between its features using the main navigation bar. - [Approvals](https://docs.rencore.com/governance/guides/rencore-teams-app/approvals.md): The Approvals page of the Rencore Teams App lists the decisions waiting for you: workspace provisioning requests and approvals sent by automations. - [View your approval history](https://docs.rencore.com/governance/guides/rencore-teams-app/approvals/approval-history.md): The History tab of Approvals in the Rencore Teams App lists every approval you approved or declined, with requester, due date and final state. - [Approve or decline a request](https://docs.rencore.com/governance/guides/rencore-teams-app/approvals/approving-or-declining-a-request.md): How to approve a workspace request in the Rencore Teams App, or decline it with a reason when it does not meet your organization's requirements. - [Change the language and date format of the Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app/change-language-and-date-format.md): The Rencore Teams App shows text in your browser language and dates in the format of your profile. How to change both. - [Change the appearance of the Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app/change-the-appearance-of-the-rencore-teams-app.md): Info: All images other than "Colour icon" need to have a transparent background. - [Configure the Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app/configuring-rencore-teams-app.md): How to switch your users from Rencore Nova to the Rencore Teams App in Teams App Settings, for all users at once or for selected users first. - [Configure the home page banner](https://docs.rencore.com/governance/guides/rencore-teams-app/configuring-the-home-page-banner.md): How to show an announcement banner on the Rencore Teams App home page, which each user sees until they dismiss it, and how to show it again. - [Create Explore & Learn links](https://docs.rencore.com/governance/guides/rencore-teams-app/creating-explore-and-learn-links.md): How to add Explore & Learn links to the Rencore Teams App home page, pointing users to your own guidance such as a governance SharePoint site. - [Use the Rencore Teams App home page](https://docs.rencore.com/governance/guides/rencore-teams-app/home-page.md): The Home page of the Rencore Teams App: what needs your attention, such as reviews and approvals, plus shortcuts to the actions you use most. - [Install the Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app/installing-rencore-teams-app.md): How a Workspace Owner or Admin installs the Rencore Teams App: connect the Environment in Teams App Settings, then add the app in the Teams admin center. - [Requests](https://docs.rencore.com/governance/guides/rencore-teams-app/requests.md): Request a new workspace from a template in the Rencore Teams App and follow its status. - [Request provision of a workspace](https://docs.rencore.com/governance/guides/rencore-teams-app/requests/request-provision-of-a-workspace.md): Request a new workspace (Microsoft 365 Group, Team or SharePoint site) in the Rencore Teams App, from a template or a Smart Template on the Home page. - [Track your requests](https://docs.rencore.com/governance/guides/rencore-teams-app/requests/tracking-your-requests.md): How to follow the workspace requests you submitted in the Rencore Teams App on the History tab, from processing and approval to done or declined. - [Continue a review once started](https://docs.rencore.com/governance/guides/rencore-teams-app/review/continuing-a-review-once-started.md): How to resume a review you stopped halfway in the Rencore Teams App, as long as it is still active and nobody else completed it. - [Decline a review](https://docs.rencore.com/governance/guides/rencore-teams-app/review/declining-a-review.md): How to reject a review assigned to you in the Rencore Teams App, with a reason, when you cannot complete it. You are then removed as its reviewer. - [Review](https://docs.rencore.com/governance/guides/rencore-teams-app/review.md): How workspace owners complete reviews in the Rencore Teams App: check who has access, remove people who no longer need it and confirm sharing. - [View your review history](https://docs.rencore.com/governance/guides/rencore-teams-app/review/review-history.md): The History tab shows all your past reviews. Use the filter pills at the top to filter by service type, and the search bar to find a specific workspace by name. - [Start a review](https://docs.rencore.com/governance/guides/rencore-teams-app/review/start-a-review.md): How to start a review in the Rencore Teams App from its card, and what the start page shows: reviewers, due date, workspace details and guidelines. - [Fix Rencore Teams App connection messages](https://docs.rencore.com/governance/guides/rencore-teams-app/troubleshooting.md): The messages the Rencore Teams App and its setup page show when the app cannot connect, and how to fix each one. - [Update the Rencore Teams App](https://docs.rencore.com/governance/guides/rencore-teams-app/update-rencore-teams-app.md): How to update the Rencore Teams App with a new manifest file in the Teams admin center when a new version is released. - [Update Explore & Learn links](https://docs.rencore.com/governance/guides/rencore-teams-app/updating-explore-and-learn-links.md): Update the Explore and Learn links on the Rencore Teams App Home page, up to five links to guidance inside or outside Rencore. - [Workspaces](https://docs.rencore.com/governance/guides/rencore-teams-app/workspaces.md): The Workspaces page of the Rencore Teams App shows the Teams, SharePoint sites, Viva Engage communities and groups you own or belong to, in one place. - [Turn on services for Teams App workspaces](https://docs.rencore.com/governance/guides/rencore-teams-app/workspaces/enable-services-for-rencore-teams-apps-workspaces.md): How to let workspace owners manage their workspaces in the Rencore Teams App, by enabling management for each workspace type in Teams App Settings. - [Manage workspaces](https://docs.rencore.com/governance/guides/rencore-teams-app/workspaces/managing-workspaces.md): How workspace owners manage their Teams, sites and groups in the Rencore Teams App once an admin has enabled management for that workspace type. - [Add a report as a tile to a dashboard](https://docs.rencore.com/governance/guides/reports/add-report-as-tile-to-dashboard.md): How to add a Rencore Governance report to a Dashboard as a tile, with a name of your choice, from the report's action menu. - [Clone a report](https://docs.rencore.com/governance/guides/reports/clone-a-report.md): How to copy an existing report in Rencore Governance and change its logic, visualization and details in the Report Builder to make a new one. - [Create a custom report](https://docs.rencore.com/governance/guides/reports/create-a-custom-report.md): How to build a custom report in Rencore Governance with the Report Builder: choose the object, set the logic and pick how the results are shown. - [Create a report from a template](https://docs.rencore.com/governance/guides/reports/create-a-report-from-a-template.md): How to add a report from the Report Template Library in Rencore Governance, filtered by service, category and type, and adjust it before saving. - [Delete a report](https://docs.rencore.com/governance/guides/reports/delete-a-report.md): How to delete a report you no longer need from Rencore Governance, from the action menu next to the report's title. - [Export a report](https://docs.rencore.com/governance/guides/reports/export-a-report.md): How to export a report from Rencore Governance as a file, so you can import it into another Workspace or Environment. - [Import a report](https://docs.rencore.com/governance/guides/reports/import-a-report.md): How to import a report file into Rencore Governance, for example one exported from another Workspace or Environment. - [Reports](https://docs.rencore.com/governance/guides/reports.md): Rencore Governance Reports are a feature to aggregate data in Rencore Governance as charts or lists. - [See who holds admin roles](https://docs.rencore.com/governance/guides/reports/see-who-holds-admin-roles.md): List who holds each Entra ID directory role, directly or through a group, and get a violation for admins without MFA or holders that break your rule. - [See who last changed a file](https://docs.rencore.com/governance/guides/reports/see-who-last-changed-a-file.md): Build a report that shows who last changed each SharePoint or OneDrive file and when, as of the last scan, for a site, a library or a person. - [Share a report](https://docs.rencore.com/governance/guides/reports/share-a-report.md): How to share a Rencore Governance report by email, with people who have access to Rencore Governance and with people who do not. - [Create a review](https://docs.rencore.com/governance/guides/review/create-a-review.md): How to create a review schedule in Rencore Governance with the Review Builder: the trigger, the review settings and the details. - [Review](https://docs.rencore.com/governance/guides/review.md): Reviews in Rencore Governance ask owners to confirm who should keep access to a workspace or object, in scheduled cycles. They replace Access Reviews. - [Monitor reviews](https://docs.rencore.com/governance/guides/review/monitoring-reviews.md): How to follow a running review schedule in Rencore Governance: its progress, each cycle and each object review, and the admin actions you can take. - [Set up review automations](https://docs.rencore.com/governance/guides/review/review-automations.md): How to set what happens automatically during and after a review in Rencore Governance: rejection, expiry follow-up and custom automations. - [Use the reviews dashboard](https://docs.rencore.com/governance/guides/review/review-dashboard.md): The Reviews dashboard in Rencore Governance lists every review schedule you created, lets you switch each one on or off and opens its settings. - [Stop a review cycle](https://docs.rencore.com/governance/guides/review/stopping-a-review-cycle.md): How to stop an active review cycle in Rencore Governance, and what happens to the object reviews that are pending, in progress or already done. - [Change an Environment currency](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/change-an-environment-currency.md): How to change the currency of an Environment in Rencore Governance. Values such as license costs switch to it after the next scan of that area. - [Give Power Platform consent with the admin consent workflow](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/consent-for-power-platform-when-admin-consent-workflow-is-enabled.md): How to give Rencore Governance consent for Power Platform when your tenant uses the Microsoft admin consent workflow, in three steps. - [Copy Environment information](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/copy-environment-information.md): How to copy the details of your Workspace and Environment in Rencore Governance, so you can paste them into a support request. - [Set up custom mail settings](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/custom-mail-settings.md): How to send Rencore Governance emails from your own mail server instead of from rencore.com, for automation messages only or for all messages. - [Disable a service](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/disable-a-service.md): Note: All previously configured dashboards, tiles, policies, and automations using the service(s) will stop working. - [Set up Environment notifications](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/environment-notifications.md): How to choose who Rencore Governance notifies for an Environment when consent is lost, an automation fails or a scan has problems. - [Environment settings](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings.md): Manage consent, connectors, scans, notifications, currency and virtual environments for one Environment. - [Get a demo Environment](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/provision-of-a-new-demo-environment.md): How to get a Rencore Governance demo Environment with demo data: sign up at try.rencore.com. It cannot connect a real tenant and runs for 14 days. - [Re-consent permissions](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/re-consent-permissions.md): How to consent again to the permissions Rencore Governance needs for an Environment, from Environment Settings or a direct link. - [Configure system notifications](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/system-notifications.md): How to set which system notifications Rencore Governance sends, such as consent lost and errors in automations, and who receives them. - [Add a Virtual Environment](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/tenant-segmentation/add-a-virtual-environment.md): How to add a Virtual Environment, a segment of one Microsoft 365 tenant with its own permissions, appearance and services, for a department or region. - [Tenant segmentation](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/tenant-segmentation.md): Split one Microsoft 365 tenant into virtual environments, for example one per country, region or subsidiary. - [View scan job history](https://docs.rencore.com/governance/guides/settings-and-configuration/environment-settings/view-scan-job-history.md): Rencore Governance allows you to view the complete scan job history for an environment, including jobs that have completed and ones that are currently running. - [Settings & configuration](https://docs.rencore.com/governance/guides/settings-and-configuration.md): Configure your Rencore Governance workspaces, environments, users and roles, and personal profile settings. - [Profile settings](https://docs.rencore.com/governance/guides/settings-and-configuration/profile-settings.md): Set your own preferences: the workspace that opens first and how dates, times and numbers look. - [Select a default Workspace](https://docs.rencore.com/governance/guides/settings-and-configuration/profile-settings/select-a-default-workspace.md): If you manage or have access to more than one Workspace, you can select which is the default one that is loaded when signing into Rencore Governance. - [Set your default date, time and number format](https://docs.rencore.com/governance/guides/settings-and-configuration/profile-settings/set-default-date-time-and-number-format.md): How to set the date, time and number format Rencore Governance uses for you, by choosing a region in your profile. - [Assign a user a role and team](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/assign-a-user-a-role-and-team.md): How to give a Rencore Governance user a role, such as Admin or Reader, and add them to a team that sets which objects they can see. - [Create a custom role](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/create-a-custom-role.md): How to create a custom role in Rencore Governance with a name, a description and exactly the permissions you choose. - [Create a custom team](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/create-a-custom-team.md): How to create a custom team in Rencore Governance and choose the services and objects its members can see. - [Users & roles](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles.md): Invite users and decide what each one can do (role) and which objects they can see (team). - [Invite users to a Workspace](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/invite-users-to-a-workspace.md): This process can only be performed by either the owner or admin of the workspace. - [Invite users to an Environment](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/invite-users-to-an-environment.md): This process can only be performed by either an owner or an admin of the workspace. - [Check the default roles and permissions](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/what-are-the-default-roles-and-permissions-in-rencore-governance.md): The four built-in roles in Rencore Governance, Owner, Admin, Contributor and Reader, and what each one can do. - [Check the default teams](https://docs.rencore.com/governance/guides/settings-and-configuration/users-and-roles/what-are-the-default-teams.md): Rencore Governance has eighteen built-in teams, one per connector and one for all, and each decides which inventory data its members see. - [Change the appearance of Rencore Governance](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/change-appearance.md): How to change the branding of your Rencore Governance Workspace, such as its logo and colors, with a preview before you save. - [Change the language](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/change-language.md): Our products use the default browser language to determine which language to show in the products. - [Configure inventory objects](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/configure-inventory-objects.md): How to switch off an inventory object or relation in Rencore Governance, or change how often an object is updated by scans. - [Connect a tenant to a Workspace](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/connect-a-tenant-to-a-workspace.md): How to connect your Microsoft 365 tenant to a Rencore Governance Workspace, so it scans your own data. - [Onboard a new organization](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/create-a-new-workspace-to-onboard-a-new-organization.md): Using multiple workspaces is typically most relevant for consulting partners or managed service providers who manage multiple clients or environments. - [Delete a Workspace](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/delete-a-workspace.md): How to delete a Rencore Governance Workspace. It deletes all its data and ends the Subscription; support can restore the data for 30 days only. - [Disable external services](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/disable-external-services.md): Rencore Governance uses some external services for chat, feedback and usage data. This page shows which of them you can turn off yourself. - [Turn on a beta feature](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/enable-a-beta-feature.md): How Workspace Owners switch on a Rencore Governance beta feature to try it early, and the conditions that apply to beta features. - [Turn on beta preview](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/enable-beta-preview.md): How Workspace Owners switch on the beta preview in Rencore Governance to see features before release, and the conditions that apply. - [Workspace settings](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings.md): Connect a tenant, control who can sign in, turn on beta features and change how your workspace looks. - [Restrict Workspace access by domain](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/restrict-workspace-access-by-domain.md): Warning: Domain access rules will be ignored for users with the Built-in role of Owner. - [Restrict Entra ID users to Rencore Governance and Rencore Nova](https://docs.rencore.com/governance/guides/settings-and-configuration/workspace-settings/restricting-azure-users-to-rencore-governance-and-rencore-nova.md): How to control in Microsoft Entra ID which users can sign in or sign up to Rencore Governance and Rencore Nova. It does not grant Workspace access. - [Troubleshooting](https://docs.rencore.com/governance/guides/troubleshooting.md): Common issues and errors when using Rencore Governance, and how to resolve them. - [Common troubleshooting issues](https://docs.rencore.com/governance/guides/troubleshooting/common-troubleshooting-issues.md): Solutions to common Rencore Governance issues: sign-in consent prompts, automation template errors, and missing permissions. - [Scan errors](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors.md): What each Rencore Governance scan error message means, why it happens and how to fix it, for SharePoint, Teams and Power Platform scans. - [Power Platform: failed to create a Microsoft Dataverse system row representing user](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/power-platform-failed-to-create-a-microsoft-dataverse-system-row-representing-user.md): What the Power Platform scan error "Failed to create a Microsoft Dataverse system row representing user" means, and how to fix it. - [Power Platform: the user cannot be created in Microsoft Dataverse](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/power-platform-the-user-cannot-be-created-in-microsoft-dataverse.md): Why a Power Platform scan reports that the user cannot be created in Microsoft Dataverse, and how an admin fixes it by adding the user to the group. - [Power Platform: user does not have sufficient permissions in Microsoft Dataverse for flow](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/power-platform-user-does-not-have-sufficient-permissions-in-microsoft-dataverse-for-flow.md): The Power Platform consent account cannot read a flow in its Dataverse environment, so Rencore Governance skipped the details of that flow. - [SharePoint: forbidden, access denied to resource](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/sharepoint-forbidden-access-denied-to-resource.md): A SharePoint scan could not read a site icon because policies or configuration on the tenant deny access to it. - [SharePoint: invalid storage metrics collected for SharePoint list](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/sharepoint-invalid-storage-metrics-collected-for-sharepoint-list.md): What the SharePoint scan warning "Invalid storage metrics collected for SharePoint list" means, and how to check and fix it. - [SharePoint: too many subsites](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/sharepoint-too-many-subsites.md): A Microsoft Graph bug stops the scan of a SharePoint site collection with more than 12 subsites. How to fix it by moving subsites. - [Teams: channel tabs null](https://docs.rencore.com/governance/guides/troubleshooting/scan-errors/teams-teams-channel-tabs-null.md): A Microsoft Graph bug stops the scan of Teams channel tabs that have no display name. How to fix it by removing the invalid tabs. - [Learn the basics of your Workspace](https://docs.rencore.com/governance/guides/your-rencore-workspace/basic-guide-to-your-workspace.md): A curated set of workspace basics guides spanning dashboards, checks, automation, and settings. - [Turn on demo mode](https://docs.rencore.com/governance/guides/your-rencore-workspace/enabling-demo-mode.md): Demo mode hides banners such as connect your tenant and expiring subscription, so you can present Rencore Governance without distractions. - [Export data grids to PDF or Excel](https://docs.rencore.com/governance/guides/your-rencore-workspace/export-datagrids-to-pdf-or-excel.md): How to export a Rencore Governance data grid, such as an inventory or a report, to Excel or PDF with the visible columns or all columns. - [Workspace introduction](https://docs.rencore.com/governance/guides/your-rencore-workspace.md): Your Rencore Governance Workspace: trials, search, data grids, audit logs, demo mode, and switching between Environments and Workspaces. - [Search Rencore Governance](https://docs.rencore.com/governance/guides/your-rencore-workspace/search-your-environment.md): Search finds inventories, segments, reports, policies, automations, reviews and provisioning templates in your current Environment by title or description. - [Search a data grid](https://docs.rencore.com/governance/guides/your-rencore-workspace/searching-datagrid.md): How to search a data grid in Rencore Governance by display name, so it shows only the items that match. The search applies to that grid only. - [Start a Rencore Lite trial](https://docs.rencore.com/governance/guides/your-rencore-workspace/start-a-rencore-governance-trial.md): Start a 14-day Rencore Lite trial: sign up on rencore.com, connect your own Microsoft 365 tenant, inventory it and see your first risks ranked by severity. - [Switch between Environments](https://docs.rencore.com/governance/guides/your-rencore-workspace/switch-between-environments.md): How to switch between the Environments and Virtual Environments of a Workspace with the Workspace and Environment selector in Rencore Governance. - [Switch between Workspaces](https://docs.rencore.com/governance/guides/your-rencore-workspace/switch-between-workspaces.md): How to switch to another Rencore Governance Workspace you belong to with the Workspace and Environment selector in the bottom left corner. - [View audit logs](https://docs.rencore.com/governance/guides/your-rencore-workspace/view-audit-logs.md): How to open the audit log of a Rencore Governance Workspace to see who did what and when, such as adding a user or changing a dashboard. ## Reference - [Provisioning template configuration](https://docs.rencore.com/governance/reference/provisioning-templates/configuration.md): Every step of the provisioning template builder in Rencore Governance: the template library, Template Settings, Provisioning Settings and Approval. - [Provisioning template end user experience](https://docs.rencore.com/governance/reference/provisioning-templates/end-user-experience.md): What requesters and approvers see in the Rencore Teams App for a provisioning template: gallery, request form, approval and history. - [Review template configuration](https://docs.rencore.com/governance/reference/review-templates/configuration.md): Every step of the Review Builder in Rencore Governance: trigger, review settings, communication, guidelines, automations and details. - [Review template end user experience](https://docs.rencore.com/governance/reference/review-templates/end-user-experience.md): What reviewers see in the Rencore Teams App during a review: the card, the start page, each step, the summary and completion. - [Custom role](https://docs.rencore.com/governance/reference/roles/customrole.md): A custom role in Rencore Governance combines any of the permissions listed here, grouped by area, instead of a fixed built-in role. - [Continuous scan](https://docs.rencore.com/governance/reference/scanning-and-throttling/continuous-scan.md): Rencore Governance scans your Microsoft 365 tenant in the background, with a scan interval per object type, so there is no fixed update schedule. - [Scanning & throttling](https://docs.rencore.com/governance/reference/scanning-and-throttling.md): How Rencore Governance scans your tenant and manages throttling limits imposed by Microsoft 365. - [Partial scanning](https://docs.rencore.com/governance/reference/scanning-and-throttling/partial-scanning.md): Partial scanning updates the Rencore Governance inventory batch by batch while a scan runs, instead of waiting for the whole tenant to finish. - [Throttling by Microsoft 365](https://docs.rencore.com/governance/reference/scanning-and-throttling/throttling-by-microsoft-365.md): What Microsoft 365 throttling is, why Microsoft limits API requests, and how it slows down or delays Rencore Governance scans. - [Understanding scan buckets and parallel scanning](https://docs.rencore.com/governance/reference/scanning-and-throttling/understanding-scan-buckets-and-parallel-scanning.md): How Rencore Governance groups connectors into scan buckets that run in parallel, to keep scans fast and stay within Microsoft API throttling limits. - [Availability and status](https://docs.rencore.com/governance/reference/security-and-privacy/availability-and-status.md): The availability Rencore commits to for Rencore Governance, where to see the live service status, and how configuration is backed up. - [Certifications and compliance](https://docs.rencore.com/governance/reference/security-and-privacy/certifications-and-compliance.md): The certifications Rencore GmbH holds, the reports and questionnaires for Rencore Governance, and where to request them on the Rencore Trust Center. - [Admin portal access](https://docs.rencore.com/governance/reference/security-and-privacy/data/admin-portal-access.md): Which customer data authorized Rencore staff can see in the internal admin portal they use to operate Rencore Governance, and why. - [Customer data](https://docs.rencore.com/governance/reference/security-and-privacy/data/customer-data.md): What customer data Rencore Governance collects and processes: the information and metadata in Microsoft 365 and the other connectors you connect. - [Data residency](https://docs.rencore.com/governance/reference/security-and-privacy/data/data-residency.md): Rencore Governance stores all data in the Microsoft data center chosen by the customer upon creation of the Rencore Governance workspace. - [Data retention](https://docs.rencore.com/governance/reference/security-and-privacy/data/data-retention.md): Rencore Governance keeps the details of the latest scan only, plus totals such as object and violation counts over time to show trends. - [Data](https://docs.rencore.com/governance/reference/security-and-privacy/data.md): How Rencore Governance handles customer data, personally identifiable information, and data retention. - [Personally identifiable information](https://docs.rencore.com/governance/reference/security-and-privacy/data/personally-identifiable-information.md): The personal data Rencore Governance stores, such as user names, email addresses and URLs, and how the collected data can be removed. - [Telemetry data](https://docs.rencore.com/governance/reference/security-and-privacy/data/telemetry-data.md): To operate and improve the service, Rencore Governance collects telemetry data that authorized support personnel can access. - [Un-anonymize user data](https://docs.rencore.com/governance/reference/security-and-privacy/data/un-anonymize-user-data.md): Microsoft hides user names in Microsoft 365 usage reports by default. Which Rencore Governance objects this affects and how to show the names again. - [Security & privacy](https://docs.rencore.com/governance/reference/security-and-privacy.md): How Rencore Governance secures your data and the permissions it requires to scan your Microsoft 365 tenant. - [Is Rencore Governance secure?](https://docs.rencore.com/governance/reference/security-and-privacy/is-rencore-governance-secure.md): How Rencore Governance meets enterprise and government security requirements, including the ISO 27001 and ISO 27017 certifications Rencore holds. - [Anthropic consent](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/anthropic-consent.md): How to connect a Claude Enterprise organization to Rencore Governance with Anthropic API keys, so its users, projects and activity appear in the inventory. - [Entra ID app creation](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/azure/azure-ad-app-creation.md): For Azure, you create the Entra ID app yourself in the tenant to scan, then enter its details in Rencore Governance. How to create it, step by step. - [Azure consent](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/azure/azure-consent.md): How to give Rencore Governance consent for Azure by entering the details of the Entra ID application you created in the tenant to scan. - [Azure](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/azure.md): The permissions Rencore Governance needs to scan your Azure subscriptions, and how to create the Entra ID app and give consent for it. - [Copilot Studio consent](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/copilot-studio/copilot-studio-consent.md): How to connect Copilot Studio to Rencore Governance with an Entra ID application you create, registered for Power Platform with a PowerShell script. - [Dataverse and Copilot Studio](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/copilot-studio/dataverse-and-copilot-studio.md): How to create the Entra ID application for Copilot Studio, and set up a Dataverse Environment by hand if Rencore Governance cannot do it for you. - [Copilot Studio](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/copilot-studio.md): Permissions Rencore Governance requires to connect with Microsoft Copilot Studio. - [Permissions](https://docs.rencore.com/governance/reference/security-and-privacy/permissions.md): The permissions Rencore Governance requires across Microsoft 365, Power Platform, and the other connectors. - [Create the Power BI app](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/power-bi/dataverse-and-power-bi.md): For Power BI, you create the Entra ID app yourself in the tenant to scan, then enter its details in Rencore Governance. How to create it, step by step. - [Power BI](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/power-bi.md): The permissions Rencore Governance needs to scan Power BI, and how to create the Entra ID application and give consent for it. - [Power BI consent](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/power-bi/power-bi-consent.md): How to give Rencore Governance consent for Power BI by entering the details of the Entra ID application you created in the tenant to scan. - [Power Platform consent](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/power-platform-consent.md): The Power Platform application is the scanning service used for gathering data about Power Automate and Power Apps entities. - [Required permissions](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/required-permissions.md): Rencore Governance needs permissions to your Microsoft 365 tenant in order to operate and collect the data of the connectors that you would like to govern. - [Revoking permissions](https://docs.rencore.com/governance/reference/security-and-privacy/permissions/revoking-permissions.md): How to revoke the permissions you granted Rencore Governance at any time, in the Microsoft Entra admin center or in claude.ai for Claude Enterprise. - [Rencore’s shared responsibility model](https://docs.rencore.com/governance/reference/security-and-privacy/rencores-shared-responsibility-model.md): Rencore's shared responsibility model under ISO 27017: which security tasks Rencore handles for Rencore Governance and which stay with you. - [Application security and development](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/application-security-and-development.md): How Rencore protects the application against SQL injection and the OWASP Top 10, and how security is built into development and testing. - [Availability](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/availability.md): The availability Rencore commits to for Rencore Governance and the regions where the service is offered. - [Data privacy](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/data-privacy.md): Where customer data is stored, how it is encrypted, GDPR, how long data is kept after a subscription ends, and what data leaves your tenant. - [Security overview](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview.md): An overview of security in Rencore Governance: who can access data, the security measures in place and the main parts of the infrastructure. - [Information security policy](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/information-security-policy.md): Where to find the Information Security Policy, the security report, the SOC 2 Type 2 report and the agreements for Rencore Governance. - [Infrastructure](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/infrastructure.md): How customers connect to Rencore Governance, how its Azure infrastructure is secured, and the compliance standards it follows. - [Roles and access control](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/roles-and-access-control.md): Who at Rencore can access production systems, what subcontractors can access, and how Rencore Governance gets access to your tenant. - [Technical overview](https://docs.rencore.com/governance/reference/security-and-privacy/security-overview/technical-overview.md): The Azure components Rencore Governance runs on and the technology the solution is built with. ## Use cases - [Archive or delete inactive workspaces](https://docs.rencore.com/governance/use-cases/archive-or-delete-inactive-workspaces.md): Find Teams, sites and communities nobody uses anymore, ask the owners whether they are still needed, and archive or delete the rest. - [Clean up after leavers](https://docs.rencore.com/governance/use-cases/clean-up-after-leavers.md): Find what people who left still own or hold, such as Teams, sites, OneDrives and licenses, and hand it over or remove it. - [Connect governance to your ticket system](https://docs.rencore.com/governance/use-cases/connect-governance-to-your-ticket-system.md): Open a ticket in ServiceNow or another ticket system, or start a Power Automate flow, when a policy finds a violation or an automation runs. - [Delegate governance by country or subsidiary](https://docs.rencore.com/governance/use-cases/delegate-governance-by-country-or-subsidiary.md): Give a country, subsidiary or business unit its own view of the tenant, with admins who see and act only inside their scope. - [Find and fix oversharing](https://docs.rencore.com/governance/use-cases/find-and-fix-oversharing.md): Find files, sites and Teams that are shared more widely than they should be, and remove the sharing or ask the owners to clean it up. - [Govern AI agents](https://docs.rencore.com/governance/use-cases/govern-ai-agents.md): Know every Copilot Studio and SharePoint agent, find the ones without an owner, the stale ones and the ones that answer from public websites, and clean them up. - [Govern guests and external users](https://docs.rencore.com/governance/use-cases/govern-guests-and-external-users.md): See every guest in your tenant, find the ones who are inactive or never accepted their invitation, and remove their access. - [Govern Power Platform and Power BI](https://docs.rencore.com/governance/use-cases/govern-power-platform-and-power-bi.md): Know every Power App, flow and Power BI workspace, and find the ones without owners, the unused ones and the ones shared too widely. - [What do you want to do?](https://docs.rencore.com/governance/use-cases.md): Start from the outcome you want, such as fixing oversharing or retiring inactive workspaces, and follow the guides, policies and automations that get you there. - [Keep every workspace owned](https://docs.rencore.com/governance/use-cases/keep-every-workspace-owned.md): Find Teams, sites and groups with no owner, one owner or only disabled owners, and get a second owner in place. - [Manage storage and file versions](https://docs.rencore.com/governance/use-cases/manage-storage-and-file-versions.md): See storage use against quota for every site and OneDrive, get warned before a quota is full, and trim old file versions. - [Prepare your content for Copilot](https://docs.rencore.com/governance/use-cases/prepare-your-content-for-copilot.md): Before you roll out Copilot, find the sites and files that are shared too widely, have no sensitivity label, or are old and unused. - [Provision governed workspaces](https://docs.rencore.com/governance/use-cases/provision-governed-workspaces.md): Let users request new Teams and sites from approved templates, with naming rules, business metadata and an approval step. - [Recertify access with reviews](https://docs.rencore.com/governance/use-cases/recertify-access-with-reviews.md): Ask workspace owners on a schedule to confirm who still needs access, and remove the people who do not. - [Reduce license and AI spend](https://docs.rencore.com/governance/use-cases/reduce-license-and-ai-spend.md): Find Microsoft 365 and Copilot licenses nobody uses, and watch Copilot Studio consumption before it goes over your pay-as-you-go limit. - [Report and prove compliance](https://docs.rencore.com/governance/use-cases/report-and-prove-compliance.md): Show auditors and management what is in your tenant and how well it follows your policies, with reports, dashboards and exports. ## Glossary - [Access review](https://docs.rencore.com/governance/glossary/access-review.md): What an access review is in the deprecated Access feature of Rencore Governance, and how it differs from Reviews. - [Add-on module](https://docs.rencore.com/governance/glossary/add-on-module.md): The three Rencore Governance modules, Digital Workplace, Apps, Automation & BI, and AI & Agents, and how add-ons extend a Plan. - [Admin center](https://docs.rencore.com/governance/glossary/admin-center.md): Which Microsoft admin center you use for which Rencore Governance setup step: Teams, Microsoft Entra, Microsoft 365 and Power Platform. - [Admin consent workflow](https://docs.rencore.com/governance/glossary/admin-consent-workflow.md): What the Microsoft admin consent workflow changes for Rencore Governance: the consent prompt at sign-in and the Power Platform consent. - [Admin portal](https://docs.rencore.com/governance/glossary/admin-portal.md): What the Rencore admin portal is and which metadata authorized Rencore personnel can see in it. - [Agent authentication](https://docs.rencore.com/governance/glossary/agent-authentication.md): What authentication means for a Copilot Studio agent, why public agents without sign-in are a risk, and how Rencore Governance flags them. - [AI agent](https://docs.rencore.com/governance/glossary/ai-agent.md): How Rencore Governance inventories and governs AI agents from Copilot Studio, SharePoint, Microsoft Foundry and ChatGPT Enterprise. - [Anonymized user data](https://docs.rencore.com/governance/glossary/anonymized-user-data.md): Why some Rencore Governance objects show anonymized user names, and how a Global administrator turns it off. - [App registration](https://docs.rencore.com/governance/glossary/app-registration.md): Which Rencore Governance connectors need an app registration in your own tenant, what you enter at consent, and how app registrations are scanned. - [Application and delegated permissions](https://docs.rencore.com/governance/glossary/application-and-delegated-permissions.md): The difference between application (app-only) and delegated permissions, and which Rencore Governance connectors use each. - [Approval](https://docs.rencore.com/governance/glossary/approval.md): What an approval is in Rencore Governance: a decision on a provisioning request or an automation, made in the Rencore Teams App. - [Archiving](https://docs.rencore.com/governance/glossary/archiving.md): How Rencore Governance archives and unarchives Teams and SharePoint sites with automation actions. - [Audit log](https://docs.rencore.com/governance/glossary/audit-log.md): What the Rencore Governance audit log records, who can open it and how long entries are kept. - [Automation action](https://docs.rencore.com/governance/glossary/automation-action.md): What an automation action is: one operation an automation step performs, from sending an email to calling a webhook. - [Automation batch](https://docs.rencore.com/governance/glossary/automation-batch.md): What an automation batch is: the automation runs that started from the same trigger at the same time. - [Automation threshold](https://docs.rencore.com/governance/glossary/automation-threshold.md): What an automation threshold is in Rencore Governance, its 20% default, and what happens when an automation reaches it. - [Automation](https://docs.rencore.com/governance/glossary/automation.md): What an automation is in Rencore Governance: a workflow of actions that runs on inventory objects when a trigger fires. - [Autonomous agent](https://docs.rencore.com/governance/glossary/autonomous-agent.md): What an autonomous Copilot Studio agent is, why it needs a closer look for cost and oversight, and the policies Rencore Governance has for it. - [Beta features](https://docs.rencore.com/governance/glossary/beta-features.md): What Rencore Governance beta features are and how an Owner turns on Beta Preview for a Workspace. - [Built-in action](https://docs.rencore.com/governance/glossary/built-in-action.md): What a built-in action is: a ready-made operation you run directly on inventory objects in Rencore Governance. - [Built-in role](https://docs.rencore.com/governance/glossary/built-in-role.md): The four built-in roles of Rencore Governance, Owner, Admin, Contributor and Reader, and what each one can do. - [Built-in team](https://docs.rencore.com/governance/glossary/built-in-team.md): What the built-in teams of Rencore Governance are and how they decide which inventory objects a user can see. - [Canvas app](https://docs.rencore.com/governance/glossary/canvas-app.md): What a canvas app in Power Apps is, and how Rencore Governance inventories canvas apps and flags the ones without owners or shared with everyone. - [Category](https://docs.rencore.com/governance/glossary/category.md): How categories group Rencore Governance policies, reports and automations by governance goal, such as Security or Costs. - [Channel](https://docs.rencore.com/governance/glossary/channel.md): What a Microsoft Teams channel is and how Rencore Governance inventories, checks and provisions Teams channels. - [ChatGPT Codex](https://docs.rencore.com/governance/glossary/chatgpt-codex.md): What ChatGPT Codex is and which Codex objects and policies Rencore Governance covers for ChatGPT Enterprise. - [ChatGPT Enterprise](https://docs.rencore.com/governance/glossary/chatgpt-enterprise.md): What ChatGPT Enterprise is and what the ChatGPT Enterprise connector of Rencore Governance, in preview, inventories and checks. - [Classic site](https://docs.rencore.com/governance/glossary/classic-site.md): What a classic SharePoint site is and how Rencore Governance finds classic sites and unused classic sites. - [Claude Enterprise](https://docs.rencore.com/governance/glossary/claude-enterprise.md): What Claude Enterprise is and what the Claude Enterprise connector of Rencore Governance, in preview, inventories and checks. - [Client secret](https://docs.rencore.com/governance/glossary/client-secret.md): What a client secret is in Microsoft Entra ID, which Rencore Governance connectors need one, and what happens when it expires. - [Compliance score](https://docs.rencore.com/governance/glossary/compliance-score.md): What the compliance score on the Rencore Governance Policies page shows. - [Connection](https://docs.rencore.com/governance/glossary/connection.md): What a Power Platform connection is and how Rencore Governance lists the connections used by Power Apps and flows. - [Connector](https://docs.rencore.com/governance/glossary/connector.md): What a connector is in Rencore Governance: the part that reads one service, such as Teams or Copilot Studio, into the inventory. - [Consent and reconsent](https://docs.rencore.com/governance/glossary/consent.md): What consent and reconsent mean in Rencore Governance: the permissions an administrator grants to scan a tenant. - [Context change](https://docs.rencore.com/governance/glossary/context-change.md): What a context change step is in a Rencore Governance automation, and how it runs an action once per channel, owner or other related object. - [Copilot Studio agent](https://docs.rencore.com/governance/glossary/copilot-studio-agent.md): What a Copilot Studio agent is and which policies and actions of Rencore Governance cover Copilot Studio agents. - [Copilot Studio](https://docs.rencore.com/governance/glossary/copilot-studio.md): What Copilot Studio is and what the Copilot Studio connector of Rencore Governance inventories, checks and automates. - [Criticality level](https://docs.rencore.com/governance/glossary/criticality-level.md): What the Low, Medium and High criticality levels of Rencore Governance automations and actions control. - [Custom GPT](https://docs.rencore.com/governance/glossary/custom-gpt.md): What a custom GPT is and how Rencore Governance lists and checks custom GPTs in a ChatGPT Enterprise workspace. - [Custom metadata](https://docs.rencore.com/governance/glossary/custom-metadata.md): What Custom Metadata is: your own business fields on inventory objects, used in policies, reports, provisioning and reviews. - [Custom role](https://docs.rencore.com/governance/glossary/custom-role.md): What a custom role is in Rencore Governance and how you build one from exactly the user permissions you need. - [Custom team](https://docs.rencore.com/governance/glossary/custom-team.md): What a custom team is in Rencore Governance and how it limits the inventory objects its members can see. - [Dashboard](https://docs.rencore.com/governance/glossary/dashboard.md): What a dashboard is in Rencore Governance: tiles of reports, policies and KPIs grouped for a stakeholder. - [Data center](https://docs.rencore.com/governance/glossary/data-center.md): Where Rencore Governance stores Workspace data: the Azure data center regions you can choose from. - [Data placeholder](https://docs.rencore.com/governance/glossary/data-placeholder.md): What a data placeholder is in Rencore Governance and where you use placeholders in emails, approvals and messages. - [Data Processing Agreement](https://docs.rencore.com/governance/glossary/data-processing-agreement.md): What the Rencore Governance Data Processing Agreement is, where to find it and how it relates to GDPR and sub-processors. - [Datagrid](https://docs.rencore.com/governance/glossary/datagrid.md): What a datagrid is in Rencore Governance and how to search it or export it to Excel or PDF. - [Dataverse](https://docs.rencore.com/governance/glossary/dataverse.md): What Dataverse is and how Rencore Governance uses it to scan Copilot Studio, including the manual setup when an environment fails to connect. - [Deleted object](https://docs.rencore.com/governance/glossary/deleted-object.md): How Rencore Governance lists deleted users, groups, teams and site collections, and the built-in actions that restore them. - [Demo environment and demo mode](https://docs.rencore.com/governance/glossary/demo-environment.md): What the Rencore Governance demo environment holds, where to get it, and what Demo Mode hides. - [Directory role](https://docs.rencore.com/governance/glossary/directory-role.md): How Rencore Governance lists Entra ID directory roles and their holders, and flags holders that break your rules. - [Enterprise application](https://docs.rencore.com/governance/glossary/enterprise-application.md): The enterprise applications Rencore Governance adds to your tenant when you give consent, and how you restrict, revoke and scan them. - [Environment notifications](https://docs.rencore.com/governance/glossary/environment-notifications.md): Which email notifications Rencore Governance sends for an Environment, such as Consent Lost and Error in Automation, and how to turn them on. - [Environment](https://docs.rencore.com/governance/glossary/environment.md): What an Environment is in Rencore Governance: the connected Microsoft 365 tenant inside a Workspace. - [Exchange Online](https://docs.rencore.com/governance/glossary/exchange-online.md): What Exchange Online is and what the Exchange connector of Rencore Governance inventories and checks. - [External user](https://docs.rencore.com/governance/glossary/external-user.md): What external users and guests are in Microsoft 365, and how Rencore Governance finds and governs them. - [Files & folders add-on](https://docs.rencore.com/governance/glossary/files-and-folders-add-on.md): What the Files & Folders add-on adds: SharePoint, OneDrive and Loop file and folder metadata, including permissions. - [Flow](https://docs.rencore.com/governance/glossary/flow.md): What a Power Automate flow is, and how Rencore Governance inventories flows, their runs and connections, and flags flows that need attention. - [Global administrator](https://docs.rencore.com/governance/glossary/global-administrator.md): Where Rencore Governance needs a Global Administrator, where it must not use one, and how to see who holds the role. - [Inventory object](https://docs.rencore.com/governance/glossary/inventory-object.md): What an inventory object is: one scanned item, such as a Team or a user, of an object type with properties and relations. - [Inventory](https://docs.rencore.com/governance/glossary/inventory.md): What the Rencore Governance inventory is: every object scanned from your tenant, with its properties and relations. - [Knowledge source](https://docs.rencore.com/governance/glossary/knowledge-source.md): What a knowledge source of a Copilot Studio agent is, and how Rencore Governance lists agent knowledge and flags agents that answer from public websites. - [Leaver](https://docs.rencore.com/governance/glossary/leaver.md): How Rencore Governance finds leavers and what their accounts still hold, and how to clean up with policies, actions and automations. - [License cost and currency](https://docs.rencore.com/governance/glossary/license-cost-and-currency.md): How Rencore Governance uses monthly Microsoft 365 license costs and the Environment currency in cost reports. - [Licensed user](https://docs.rencore.com/governance/glossary/licensed-user.md): How Rencore Governance counts licensed users: enabled, internal accounts with any Microsoft license, including free ones. - [Mailbox](https://docs.rencore.com/governance/glossary/mailbox.md): What an Exchange Online mailbox is and how the Exchange connector of Rencore Governance lists mailboxes and their redirect rules. - [Microsoft 365 Copilot](https://docs.rencore.com/governance/glossary/microsoft-365-copilot.md): How Rencore Governance covers Microsoft 365 Copilot: sessions, license use and the external connections Copilot can reach. - [Microsoft 365 group](https://docs.rencore.com/governance/glossary/microsoft-365-group.md): What a Microsoft 365 Group is and how Rencore Governance inventories and governs groups. - [Microsoft 365 tenant](https://docs.rencore.com/governance/glossary/microsoft-365-tenant.md): What a Microsoft 365 tenant is and how Rencore Governance connects to one tenant per Workspace. - [Microsoft 365](https://docs.rencore.com/governance/glossary/microsoft-365.md): What Microsoft 365 is and what the Microsoft 365 connector of Rencore Governance covers: groups, users and licenses. - [Microsoft Azure](https://docs.rencore.com/governance/glossary/microsoft-azure.md): What Microsoft Azure is and what the Azure connector of Rencore Governance inventories and checks. - [Microsoft Entra ID](https://docs.rencore.com/governance/glossary/microsoft-entra-id.md): How Rencore Governance uses Microsoft Entra ID: for consent to its applications, and as a connector that scans app registrations and risky sign-ins. - [Microsoft Fabric](https://docs.rencore.com/governance/glossary/microsoft-fabric.md): What Microsoft Fabric is, and where the docs mention it: the Fabric Administrator role the Power BI consent needs. - [Microsoft Foundry](https://docs.rencore.com/governance/glossary/microsoft-foundry.md): What Microsoft Foundry is and what the Microsoft Foundry connector of Rencore Governance, in preview, inventories. - [Microsoft Graph](https://docs.rencore.com/governance/glossary/microsoft-graph.md): What Microsoft Graph is and how Rencore Governance reads your tenant through it within Microsoft's limits. - [Microsoft Planner](https://docs.rencore.com/governance/glossary/microsoft-planner.md): What Microsoft Planner is and what the Planner connector of Rencore Governance inventories and provisions. - [Microsoft Teams](https://docs.rencore.com/governance/glossary/microsoft-teams.md): What Microsoft Teams is and what the Teams connector of Rencore Governance inventories, checks and automates. - [Multifactor authentication](https://docs.rencore.com/governance/glossary/multifactor-authentication.md): Why the Power Platform consent account needs MFA, and how Rencore Governance policies find administrators without MFA. - [Nav Panel](https://docs.rencore.com/governance/glossary/nav-panel.md): What the Nav Panel in Rencore Governance is, which areas it opens and why some entries are missing for some users. - [OneDrive](https://docs.rencore.com/governance/glossary/onedrive.md): What OneDrive is and what the OneDrive connector of Rencore Governance inventories, checks and automates. - [Partial scanning](https://docs.rencore.com/governance/glossary/partial-scanning.md): How partial scanning updates the Rencore Governance inventory batch by batch while a scan is still running. - [Pay-as-you-go plan](https://docs.rencore.com/governance/glossary/pay-as-you-go-plan.md): What a Microsoft pay-as-you-go plan is, and how Rencore Governance reports Copilot Studio consumption per plan and flags plans over your limit. - [Permission inheritance](https://docs.rencore.com/governance/glossary/permission-inheritance.md): What broken permission inheritance in SharePoint is, and how Rencore Governance finds it and restores it. - [Permission level](https://docs.rencore.com/governance/glossary/permission-level.md): What a SharePoint permission level is, and where Rencore Governance uses permission levels in automations and reviews. - [Plan](https://docs.rencore.com/governance/glossary/plan.md): The Rencore Governance Plans, Professional, Premium and Enterprise, and how a Plan decides which modules, add-ons and features you can use. - [Policy](https://docs.rencore.com/governance/glossary/policy.md): What a policy is in Rencore Governance: a governance rule checked against your inventory, with a severity and a category. - [Power Apps](https://docs.rencore.com/governance/glossary/power-apps.md): What Power Apps is and what the Power Apps connector of Rencore Governance inventories, checks and automates. - [Power Automate](https://docs.rencore.com/governance/glossary/power-automate.md): What Power Automate is and what the Power Automate connector of Rencore Governance inventories, checks and automates. - [Power BI](https://docs.rencore.com/governance/glossary/power-bi.md): What Power BI is and what the Power BI connector of Rencore Governance inventories, checks and automates. - [Power Platform administrator](https://docs.rencore.com/governance/glossary/power-platform-administrator.md): Why Rencore Governance needs a dedicated Power Platform Administrator account to scan Power Apps and Power Automate, and how to set it up. - [Power Platform environment](https://docs.rencore.com/governance/glossary/power-platform-environment.md): What a Power Platform environment is, how Rencore Governance lists it, and why it is not a Rencore Environment. - [Power Platform](https://docs.rencore.com/governance/glossary/power-platform.md): What Power Platform is, which of its products Rencore Governance covers, and the dedicated account the Power Platform consent needs. - [Preview](https://docs.rencore.com/governance/glossary/preview.md): What a Preview connector is in Rencore Governance: released for use but not yet generally available, such as Claude Enterprise. - [Private channel](https://docs.rencore.com/governance/glossary/private-channel.md): What a private channel in Microsoft Teams is and how Rencore Governance reports on private channels and their sites. - [Property](https://docs.rencore.com/governance/glossary/property.md): What a property of an inventory object is in Rencore Governance, and how you turn properties off or change how often scans refresh them. - [Provisioning request](https://docs.rencore.com/governance/glossary/provisioning-request.md): What a provisioning request is: a request to create a new Microsoft 365 workspace from a provisioning template. - [Provisioning template](https://docs.rencore.com/governance/glossary/provisioning-template.md): What a provisioning template defines: how a new team, site, group, Planner plan or Viva Engage community is requested, approved and created. - [Redirect rule](https://docs.rencore.com/governance/glossary/redirect-rule.md): What an Exchange mailbox redirect rule is and how Rencore Governance finds mailboxes that forward mail outside your organization. - [Relation](https://docs.rencore.com/governance/glossary/relation.md): What a relation between inventory objects is in Rencore Governance, and how policies, segments and automations use related objects. - [Rencore Governance](https://docs.rencore.com/governance/glossary/rencore-governance.md): What Rencore Governance is: the platform that inventories your digital workplace, apps, automations and AI agents and applies your rules. - [Rencore Lite](https://docs.rencore.com/governance/glossary/rencore-lite.md): What Rencore Lite is: a 14-day, self-serve trial of Rencore Governance on your own Microsoft 365 tenant, and its limits. - [Rencore Nova](https://docs.rencore.com/governance/glossary/rencore-nova.md): What Rencore Nova is: an end-user app that shows Rencore Governance content to users without direct access. - [Rencore Teams App](https://docs.rencore.com/governance/glossary/rencore-teams-app.md): What the Rencore Teams App is: Rencore Governance in Microsoft Teams for workspace owners, requesters and reviewers. - [Report](https://docs.rencore.com/governance/glossary/report.md): What a report is in Rencore Governance: a saved query over the inventory, shown as a chart, list, table or KPI. - [Review decision](https://docs.rencore.com/governance/glossary/review-decision.md): The difference between the status and the decision of a review in Rencore Governance, and where you see both. - [Review](https://docs.rencore.com/governance/glossary/review.md): What a Review is in Rencore Governance: workspace owners confirm access and sharing in the Rencore Teams App. - [Roles and teams](https://docs.rencore.com/governance/glossary/roles-and-teams.md): How roles and teams control what each Rencore Governance user can do and which inventory data they can see. - [Scan bucket](https://docs.rencore.com/governance/glossary/scan-bucket.md): What a scan bucket is: a group of connectors that share Microsoft APIs and therefore never scan at the same time. - [Scan error](https://docs.rencore.com/governance/glossary/scan-error.md): What a scan error is in Rencore Governance, where you find it in the scan job history and how the scan error guides help you fix it. - [Scan interval](https://docs.rencore.com/governance/glossary/scan-interval.md): What a scan interval is in Rencore Governance, where you set it, and why it is a target rather than a fixed time. - [Scan](https://docs.rencore.com/governance/glossary/scan.md): How Rencore Governance scans a connected tenant into the inventory, continuously and within Microsoft 365 throttling limits. - [Security group](https://docs.rencore.com/governance/glossary/security-group.md): What a security group in Microsoft Entra ID is, how Rencore Governance lists it, and where security groups matter for consent and reviews. - [Segment](https://docs.rencore.com/governance/glossary/segment.md): What a segment is in Rencore Governance: a saved, rule-based filter over inventory objects. - [Sensitivity label](https://docs.rencore.com/governance/glossary/sensitivity-label-scanning.md): How Rencore Governance uses Microsoft 365 sensitivity labels in policies and actions, and the consent label scanning needs. - [Severity](https://docs.rencore.com/governance/glossary/severity.md): What severity means in Rencore Governance: the impact level a policy assigns to its violations, from Critical to Information. - [Shared channel](https://docs.rencore.com/governance/glossary/shared-channel.md): What a shared channel in Microsoft Teams is and how Rencore Governance checks shared channels and their external members. - [SharePoint agent](https://docs.rencore.com/governance/glossary/sharepoint-agent.md): What a SharePoint agent is and how Rencore Governance lists SharePoint agents and checks them and the sites they read. - [SharePoint group](https://docs.rencore.com/governance/glossary/sharepoint-group.md): What a SharePoint group is, and how Rencore Governance scans SharePoint groups, shows them in reviews and changes them with automations. - [SharePoint](https://docs.rencore.com/governance/glossary/sharepoint.md): What SharePoint is and what the SharePoint connector of Rencore Governance inventories, checks and automates. - [Sharing link](https://docs.rencore.com/governance/glossary/sharing-link.md): How Rencore Governance finds and removes SharePoint and OneDrive sharing links, including files shared with external users. - [Site collection](https://docs.rencore.com/governance/glossary/site-collection.md): What a SharePoint site collection is in Rencore Governance, and the policies and actions that cover it. - [Storage limit](https://docs.rencore.com/governance/glossary/storage-limit.md): What a SharePoint or OneDrive storage limit is, and how Rencore Governance warns you before a site or OneDrive is full. - [Subscription](https://docs.rencore.com/governance/glossary/subscription.md): What your Rencore Governance Subscription is, how it connects to a Workspace, and how it differs from Azure and Microsoft 365 subscriptions. - [Subsite](https://docs.rencore.com/governance/glossary/subsite.md): What a SharePoint subsite is, the subsite policies of Rencore Governance, and the scan error a site collection with too many subsites causes. - [Support Portal](https://docs.rencore.com/governance/glossary/support-portal.md): What the Rencore Support Portal is, how to get an account and how support conversations work. - [Teams administrator](https://docs.rencore.com/governance/glossary/teams-administrator.md): Why you need a Teams Administrator to install and update the Rencore Teams App in the Teams admin center. - [Teams app manifest](https://docs.rencore.com/governance/glossary/teams-app-manifest.md): What a Teams app manifest is and how you download it from Rencore Governance to install or update the Rencore Teams App. - [Telemetry data](https://docs.rencore.com/governance/glossary/telemetry-data.md): Which telemetry data Rencore Governance collects to operate the service, and what it never includes. - [Template library](https://docs.rencore.com/governance/glossary/template-library.md): What the Rencore Governance template libraries hold: prebuilt dashboards, reports, policies, automations, reviews and provisioning templates. - [Tenant ID](https://docs.rencore.com/governance/glossary/tenant-id.md): What a Microsoft Entra tenant ID is, where to find it, and where Rencore Governance asks for it or shows it. - [Throttling](https://docs.rencore.com/governance/glossary/throttling.md): What Microsoft 365 throttling is and how Rencore Governance scans stay within the limits without losing data. - [Trust Center](https://docs.rencore.com/governance/glossary/trust-center.md): What the Rencore Trust Center is and which certificates, reports and agreements you request there for a vendor review. - [Version history](https://docs.rencore.com/governance/glossary/version-history.md): What SharePoint version history is, why old file versions use storage, and how Rencore Governance removes them. - [Violation](https://docs.rencore.com/governance/glossary/violation.md): What a violation is in Rencore Governance: an inventory object that matches the rule of an active policy. - [Virtual Environment](https://docs.rencore.com/governance/glossary/virtual-environment.md): What a Virtual Environment is: a segment of one Microsoft 365 tenant with its own data, policies, reports and permissions. - [Viva Engage community](https://docs.rencore.com/governance/glossary/viva-engage-community.md): What a Viva Engage community is and how Rencore Governance inventories, reviews, provisions and cleans up communities. - [Viva Engage](https://docs.rencore.com/governance/glossary/viva-engage.md): What Viva Engage is and what the Viva Engage connector of Rencore Governance inventories, checks and automates. - [Webhook](https://docs.rencore.com/governance/glossary/webhook.md): How Rencore Governance automations call webhooks with Trigger webhook and Send HTTP request, for example to start a Power Automate flow. - [Workspace lifecycle](https://docs.rencore.com/governance/glossary/workspace-lifecycle.md): How Rencore Governance handles a Microsoft 365 workspace from request and creation through review, archiving and deletion. - [Workspace owner](https://docs.rencore.com/governance/glossary/workspace-owner.md): Who workspace owners are in Rencore Governance: the owners of Teams, sites and groups who confirm access in Reviews and fix ownership gaps. - [Workspace](https://docs.rencore.com/governance/glossary/workspace.md): What a Workspace is in Rencore Governance: the container for one Environment, its users, roles and settings. ## FAQ - [Another reviewer is already working on the same review. Should I wait?](https://docs.rencore.com/governance/faq/another-reviewer-is-already-working-on-the-same-review-should-i-wait.md): You do not need to wait. Multiple reviewers can start a review independently. However, the first reviewer to complete the review submits the final result. - [Are there any limitations to scans in Rencore Governance?](https://docs.rencore.com/governance/faq/are-there-any-limitations-to-scans-in-rencore-governance.md): Yes. Rencore Governance skips SharePoint libraries that only hold system content, such as hidden lists, app lists, catalogs and site assets. - [Are there any usage limitations?](https://docs.rencore.com/governance/faq/are-there-any-usage-limitations.md): Rencore Governance can be used with multiple Microsoft 365 tenants. Each tenant is connected to its own dedicated workspace and requires its own subscription. - [Are there limits in regards to the size of the Microsoft 365 tenant that is analyzed?](https://docs.rencore.com/governance/faq/are-there-limits-in-regards-to-the-size-of-the-office-365-tenant-that-is-analyzed.md): No. Rencore Governance is tested with tenants of over 250,000 users and scales on its own, though a large tenant can take longer to refresh. - [Can I assign a security group as reviewers?](https://docs.rencore.com/governance/faq/can-i-assign-a-security-group-as-reviewers.md): No. Currently, reviewer assignment supports Owners (automatic) and Specified users (individual users you select). Security group assignment is not available. - [Can I change a review schedule while a cycle is running?](https://docs.rencore.com/governance/faq/can-i-change-a-review-schedule-while-a-cycle-is-running.md): Yes. Editing a review schedule takes effect for the next cycle. However, the currently running cycle uses the configuration that was active when it started. - [Can I change my decision after approving or declining?](https://docs.rencore.com/governance/faq/can-i-change-my-decision-after-approving-or-declining.md): No, once you submit an approval or decline decision, it cannot be changed through the Teams App. If you need to reverse a decision, contact your IT admin. - [Can I change the tiles on a dashboard?](https://docs.rencore.com/governance/faq/can-i-change-the-tiles-on-a-dashboard.md): Yes, the dashboards are completely customizable. You can add/remove/reorder the tiles on a dashboard. - [Can I edit or cancel a request after submitting it?](https://docs.rencore.com/governance/faq/can-i-edit-or-cancel-a-request-after-submitting-it.md): Once submitted, requests follow your organization's governance workflow. Contact your IT admin if you need to modify or cancel a submitted request. - [Can I have more than one Workspace?](https://docs.rencore.com/governance/faq/can-i-have-more-than-one-workspace.md): Yes, it is possible to set up more than one Workspace. This would be beneficial if you were a consultant and had access to multiple customer tenant(s). - [Can I purchase a subscription without a credit card?](https://docs.rencore.com/governance/faq/can-i-purchase-a-subscription-without-a-credit-card.md): Absolutely! If you prefer to pay via wire transfer, please contact our sales team directly. - [Can I reject a review assignment?](https://docs.rencore.com/governance/faq/can-i-reject-a-review-assignment.md): Yes. On the review start page, click Reject Review and provide a reason. You will be removed as a reviewer for that workspace. - [Can I restart a finished or canceled cycle?](https://docs.rencore.com/governance/faq/can-i-restart-a-finished-or-canceled-cycle.md): No. Each review cycle runs once. To review the same workspaces again, switch a manual schedule on again or wait for the next scheduled cycle. - [Can I see what other reviewers changed?](https://docs.rencore.com/governance/faq/can-i-see-what-other-reviewers-changed.md): Yes. Once a review is completed, open it from your History tab to see every change, such as people or permissions added or removed. - [How are related objects shown on an object's page?](https://docs.rencore.com/governance/faq/changes-to-related-objects.md): On an object's "Related Objects" page, primary relations load straight away with a count. Other relations are grouped by connector and load when you open them. - [Do I need to set up automations?](https://docs.rencore.com/governance/faq/do-i-need-to-set-up-automations.md): No. Reviewers can complete reviews and change access without automations. Automations add follow-up actions, such as archiving a workspace. - [Do you offer a monthly subscription?](https://docs.rencore.com/governance/faq/do-you-offer-a-monthly-subscription.md): Yes. Rencore Governance is available monthly on the Azure Marketplace for the Professional and Premium Plans, for tenants of up to 1,000 users. - [Do you support GCC & GCC high?](https://docs.rencore.com/governance/faq/do-you-support-gcc-and-gcc-high.md): No. Rencore Governance does not support the Microsoft 365 government clouds GCC and GCC High at the moment. - [Do you support multi-geo tenants?](https://docs.rencore.com/governance/faq/do-you-support-multi-geo-tenants.md): Yes, on the Enterprise Plan. Rencore Governance can scan and govern Microsoft 365 multi-geo tenants, whose data is stored in more than one geographic region. - [Does the Rencore Teams App work on mobile?](https://docs.rencore.com/governance/faq/does-the-rencore-teams-app-work-on-mobile.md): Yes. Every feature of the Rencore Teams App works in the Microsoft Teams mobile app, as well as in Teams on the desktop and on the web. - [How do I find the number of users licensed for Rencore Governance?](https://docs.rencore.com/governance/faq/how-do-i-find-the-number-of-users-licensed-for-rencore-governance.md): It is possible to see the number of users licensed to Rencore Governance directly in Rencore Governance. This article shows both methods. - [How do I know if my reviews are effective?](https://docs.rencore.com/governance/faq/how-do-i-know-if-my-reviews-are-effective.md): Check the cycle detail page: a high completion rate, few unreviewed workspaces and reviewers who make real decisions instead of approving everything. - [How do I renew my subscription?](https://docs.rencore.com/governance/faq/how-do-i-renew-my-subscription.md): Your Rencore Governance subscription renews on its own unless you cancel it. Review what you need with your Customer Success Manager before renewal. - [How is my data protected?](https://docs.rencore.com/governance/faq/how-is-my-data-protected.md): How Rencore protects your data in Rencore Governance: encryption at rest in Azure, TLS 1.3 in transit and access limited to the Product Operations team. - [How long should I set the review duration?](https://docs.rencore.com/governance/faq/how-long-should-i-set-the-review-duration.md): The default of 30 days gives reviewers plenty of time; a shorter window adds urgency. For scheduled reviews it must be shorter than the interval. - [How often can I perform a scan?](https://docs.rencore.com/governance/faq/how-often-can-i-perform-a-scan.md): Rencore Governance scans automatically. You set how often each object type is scanned, such as daily or weekly, but a scan can run later than planned. - [I cannot find a template for what I need. What should I do?](https://docs.rencore.com/governance/faq/i-cannot-find-a-template-for-what-i-need-what-should-i-do.md): Your IT admin creates and manages the workspace templates. Ask your IT team for a new template or for help choosing an existing one. - [I cannot find the Rencore Teams App in Microsoft Teams. How do I get access?](https://docs.rencore.com/governance/faq/i-cannot-find-the-rencore-teams-app-in-microsoft-teams-how-do-i-get-access.md): Your IT admin has to deploy the Rencore Teams App and switch it on. If it is not in your Teams sidebar or app catalog, ask your IT team for access. - [I removed someone during a review but they still have access. Why?](https://docs.rencore.com/governance/faq/i-removed-someone-during-a-review-but-they-still-have-access-why.md): Changes from a review apply only when you click Complete on the summary page. Until then they are queued. Finish the review to apply them. - [I see "Other Approvers" on an approval card. Do all approvers need to act?](https://docs.rencore.com/governance/faq/i-see-other-approvers-on-an-approval-card-do-all-approvers-need-to-act.md): This depends on how your admin configured the approval workflow. In some cases, a single approval is sufficient. In others, all listed approvers need to act. - [In which order do the connectors of a tenant get scanned?](https://docs.rencore.com/governance/faq/in-which-order-do-the-services-of-a-tenant-get-scanned.md): There is no fixed order. Connectors that share a Microsoft API scan one after the other in a scan bucket; different buckets can scan at the same time. - [Is Rencore Governance compliant with GDPR?](https://docs.rencore.com/governance/faq/is-rencore-governance-compliant-with-gdpr.md): Broadly, yes. Rencore runs a data protection program that it reviews to meet the GDPR, as set out in its terms, privacy policy and DPA. - [Is there a limit on how many emails can be sent daily?](https://docs.rencore.com/governance/faq/is-there-a-limit-on-how-many-emails-can-be-sent-daily.md): Yes. An environment in a trial can send 25 emails a day, and an environment with a subscription can send 10,000 emails a day. - [What are the different types of users?](https://docs.rencore.com/governance/faq/what-are-the-different-types-of-users.md): The four Microsoft user types, internal and external members and guests, and how Rencore Governance tells them apart in the inventory. - [What are the limitations of automations?](https://docs.rencore.com/governance/faq/what-are-the-limitations-of-automations.md): An automation runs at most once a day per object, each run can take up to 4 hours, and a threshold limit or the daily API limit can stop it early. - [What are the Rencore Governance enterprise apps?](https://docs.rencore.com/governance/faq/what-are-the-rencore-governance-enterprise-apps.md): The Enterprise Applications Rencore Governance adds to your tenant when you give consent, for global consent and for consent per service. - [What are the template codes shown for SharePoint sites?](https://docs.rencore.com/governance/faq/what-are-the-template-codes-shown-for-sharepoint-sites.md): SharePoint site template codes come from Microsoft, which publishes no official list. How to find which template a site uses and what it means. - [What do the different actions on the summary page mean?](https://docs.rencore.com/governance/faq/what-do-the-different-actions-on-the-summary-page-mean.md): Besides Complete, the review summary page can offer Archive, Delete or custom actions your admin set up. What each one does to the workspace. - [What does "Aggregating" status mean?](https://docs.rencore.com/governance/faq/what-does-aggregating-status-mean.md): Aggregating means a review cycle is collecting the workspaces that match its scope and filters from your inventory. It usually takes a few minutes. - [What does "Rejected" mean as a decision?](https://docs.rencore.com/governance/faq/what-does-rejected-mean-as-a-decision.md): It means all assigned reviewers declined the review assignment. This happens when reviewers feel they are not the right person to review a particular workspace. - [What does Rencore consider a Microsoft 365 user?](https://docs.rencore.com/governance/faq/what-does-rencore-consider-a-microsoft-365-user.md): Which Microsoft 365 users count for Rencore Governance licensing: active, not external, with a license, and the other conditions they must meet. - [What does the external access information in workspace details show me?](https://docs.rencore.com/governance/faq/what-does-the-external-access-information-in-workspace-details-show-me.md): Site Access and File Access in workspace details show who can reach the content: external users, anonymous links and organization-wide sharing. - [What happens after I submit a request?](https://docs.rencore.com/governance/faq/what-happens-after-i-submit-a-request.md): Your workspace is created at once or sent for approval, depending on your setup. Follow the request on the History tab or on your Home page. - [What happens if a workspace has no owner?](https://docs.rencore.com/governance/faq/what-happens-if-a-workspace-has-no-owner.md): With reviewers set to Owners, a workspace without an owner gets no reviewer, so its review stays pending and expires. Use specified users instead. - [What happens if I do not act on an approval before the due date?](https://docs.rencore.com/governance/faq/what-happens-if-i-do-not-act-on-an-approval-before-the-due-date.md): The approval expires and the requester and your admin are notified. Ask your admin what your organization does with expired approvals. - [What happens if I do not complete a review before the due date?](https://docs.rencore.com/governance/faq/what-happens-if-i-do-not-complete-a-review-before-the-due-date.md): The review expires and moves to your History tab as Expired. Depending on your setup, this can notify your admin or start follow-up actions. - [What happens to "Unreviewed" workspaces?](https://docs.rencore.com/governance/faq/what-happens-to-unreviewed-workspaces.md): Nothing changes for an unreviewed workspace. It stays as it is, unless a follow-up automation for expired reviews is set up, and joins the next cycle. - [What happens when I stop a cycle?](https://docs.rencore.com/governance/faq/what-happens-when-i-stop-a-cycle.md): All pending and in-progress object reviews are canceled. Reviews that were already completed or expired are preserved with their existing decisions and changes. - [What is a Workspace?](https://docs.rencore.com/governance/faq/what-is-a-workspace.md): A Workspace in Rencore Governance holds the settings, connected apps and users of its Environment, with all its data in one data center. - [What is an Environment?](https://docs.rencore.com/governance/faq/what-is-an-environment.md): Each Workspace has exactly one Environment. It uses the Workspace settings, such as connected apps, users, storage accounts, and Azure datacenter. - [What is the difference between a manual and a scheduled review?](https://docs.rencore.com/governance/faq/what-is-the-difference-between-a-manual-and-a-scheduled-review.md): A manual review runs once when you start it and then switches off. A scheduled review runs on a recurring cadence and stays on between cycles. - [What is the difference between policies and reports?](https://docs.rencore.com/governance/faq/what-is-the-difference-between-policies-and-reports.md): Reports allow the rendering of data as charts, whereas Polices only allow rendering as a Datagrid but can be used to trigger automations. - [What is the difference between status and decision?](https://docs.rencore.com/governance/faq/what-is-the-difference-between-status-and-decision.md): Status is where a review stands, such as Pending or Completed. Decision is what happened to the workspace, such as Reviewed, Archived or Deleted. - [What is the retention time of that data?](https://docs.rencore.com/governance/faq/what-is-the-retention-time-of-that-data.md): Rencore keeps your data while you use it. After a subscription ends, it archives the data for 30 days, then queues it for deletion for 30 more. - [What permissions are required for review scopes?](https://docs.rencore.com/governance/faq/what-permissions-are-required-for-review-scopes.md): The automation permissions Rencore Governance needs for each review scope, for example Users, Groups and Teams permissions for Owners and Members. - [What review steps should I enable?](https://docs.rencore.com/governance/faq/what-review-steps-should-i-enable.md): Start with Owners and Members, which cover most needs. Add Site Access and File Access when reviewers also need to check SharePoint sharing. - [What connectors can I govern with Rencore Governance?](https://docs.rencore.com/governance/faq/what-services-can-i-govern-with-rencore-governance.md): The connectors Rencore Governance supports today, from Microsoft 365, SharePoint and Teams to Power Platform, Copilot and AI services. - [Where is my data stored?](https://docs.rencore.com/governance/faq/where-is-my-data-stored.md): By default, data is stored in Azure Storage Accounts in one of the available datacenters that can be chosen upon Workspace creation. - [Who gets notified when a review starts?](https://docs.rencore.com/governance/faq/who-gets-notified-when-a-review-starts.md): The reviewers of each workspace get an email, based on the review's Communication settings: the workspace owners, or the users you selected. - [Why are all teams showing a default of 60 applications?](https://docs.rencore.com/governance/faq/why-are-all-teams-showing-a-default-of-60-applications.md): Every team shows about 60 apps because Microsoft preinstalls them, including internal ones that Teams does not display. The full list is here. - [Why are owners for distribution lists and mail-enabled security groups always 0?](https://docs.rencore.com/governance/faq/why-are-owners-for-distribution-lists-and-mail-enabled-security-groups-always-0.md): Currently, it is not possible to scan the owners for these group types. - [Why are some features or navigation items missing?](https://docs.rencore.com/governance/faq/why-are-some-features-or-navigation-items-missing.md): Your admin decides which features your organization uses. A missing item, such as Workspaces or Reviews, is not enabled or not rolled out yet. - [Why are system notifications not showing up in my workspace?](https://docs.rencore.com/governance/faq/why-are-system-notifications-not-showing-up-in-my-workspace.md): If system notifications do not show up in your Workspace, check whether Demo Mode is on. Demo Mode hides all notifications. - [Why did I receive a review assignment?](https://docs.rencore.com/governance/faq/why-did-i-receive-a-review-assignment.md): You own a workspace that is part of a review. Your organization uses reviews to check that the right people have access to it. - [Why do I not see all my workspaces?](https://docs.rencore.com/governance/faq/why-do-i-not-see-all-my-workspaces.md): The Workspaces page shows only workspaces you own or belong to, by service tab. A workspace you just joined can take a short time to appear. - [Why does my Power Automate permissions keep needing consent?](https://docs.rencore.com/governance/faq/why-does-my-power-automate-permissions-keep-needing-consent.md): Microsoft now requires MFA for administrators. Set up MFA for the admin who consents, then consent again, or the permissions will be revoked. - [Why does Rencore Governance not show a SharePoint site collection as locked when archiving a team?](https://docs.rencore.com/governance/faq/why-does-rencore-governance-not-show-a-sharepoint-site-collection-as-locked-when-archiving-a-team-dot.md): Archiving a team has no relation to the lock state of the related SharePoint Site Collection, so Rencore Governance does not show it as locked. - [Why is a service tab missing?](https://docs.rencore.com/governance/faq/why-is-a-service-tab-missing.md): Your admin chooses which Microsoft 365 services the Rencore Teams App shows. A missing tab means that service is not enabled for the app. ## Connectors - [Connectors](https://docs.rencore.com/governance/connectors/): Every connector Rencore Governance supports, grouped by module - [Azure](https://docs.rencore.com/governance/connectors/azure/): 5 object types and 1 policy, by product area - [ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/connectors/chatgpt-enterprise/): 33 object types, 30 policies, 18 automations and 9 built-in actions, by product area - [Claude Enterprise (Preview)](https://docs.rencore.com/governance/connectors/claude-enterprise/): 21 object types, 17 policies, 2 automations and 1 built-in action, by product area - [Copilot](https://docs.rencore.com/governance/connectors/copilot/): 5 object types and 5 policies, by product area - [Copilot Studio](https://docs.rencore.com/governance/connectors/copilot-studio/): 12 object types and 10 policies, by product area - [Entra ID](https://docs.rencore.com/governance/connectors/entra-id/): 22 object types and 14 policies, by product area - [Exchange](https://docs.rencore.com/governance/connectors/exchange/): 2 object types and 1 policy, by product area - [Microsoft 365](https://docs.rencore.com/governance/connectors/office365-groups/): 11 object types, 29 policies, 4 automations and 24 built-in actions, by product area - [Microsoft Foundry (Preview)](https://docs.rencore.com/governance/connectors/microsoft-foundry/): 6 object types, by product area - [OneDrive](https://docs.rencore.com/governance/connectors/onedrive/): 4 object types, 7 policies, 3 automations and 3 built-in actions, by product area - [Planner](https://docs.rencore.com/governance/connectors/planner/): 1 object type, by product area - [Power Apps](https://docs.rencore.com/governance/connectors/power-apps/): 4 object types, 3 policies, 4 automations and 4 built-in actions, by product area - [Power Automate](https://docs.rencore.com/governance/connectors/power-automate/): 6 object types, 13 policies, 2 automations and 4 built-in actions, by product area - [Power BI](https://docs.rencore.com/governance/connectors/power-bi/): 12 object types and 10 policies, by product area - [SharePoint](https://docs.rencore.com/governance/connectors/sharepoint/): 14 object types, 32 policies, 9 automations and 19 built-in actions, by product area - [Teams](https://docs.rencore.com/governance/connectors/teams/): 10 object types, 22 policies, 9 automations and 11 built-in actions, by product area - [Viva Engage](https://docs.rencore.com/governance/connectors/viva-engage/): 1 object type, 1 policy, 2 automations and 2 built-in actions, by product area ## Product guides - [All interactive product guides](https://docs.rencore.com/governance/guides/interactive-product-guides.md): Every interactive product guide for Rencore Governance in one place, filtered by service, use case, capability and solution. 44 guides. ## Tags - [Tags](https://docs.rencore.com/governance/tags.md): Every tag used in the Rencore Governance documentation: page types, status, product areas and connectors, each with its pages. ## SPCAF - [SPCAF](https://docs.rencore.com/spcaf.md): The SPCAF documentation is being moved to docs.rencore.com. Until it is ready, contact support@rencore.com for help with SPCAF. ## Optional ### Generated reference - [Azure inventory](https://docs.rencore.com/governance/reference/inventory/azure/): 5 object types Rencore Governance collects for Azure - [Azure: Advisor Recommendation](https://docs.rencore.com/governance/reference/inventory/azure/azureadvisorrecommendationentity/): Azure advisor recommendations - [Azure: Resource Group](https://docs.rencore.com/governance/reference/inventory/azure/azureresourcegroupentity/): Azure resource groups inside subscription - [Azure: Subscription](https://docs.rencore.com/governance/reference/inventory/azure/azuresubscriptionentity/): Azure subscriptions - [Azure: Virtual Machine](https://docs.rencore.com/governance/reference/inventory/azure/azurevirtualmachineentity/): Azure virtual machines inside resource group and subscription - [Azure: Web App](https://docs.rencore.com/governance/reference/inventory/azure/azurewebappentity/): Azure webapps inside resource group and subscription - [Policies for Azure](https://docs.rencore.com/governance/reference/policies/azure/): 1 built-in policies - [Azure policy: Resource Groups with too many services](https://docs.rencore.com/governance/reference/policies/azure/resource-groups-with-too-many-services/): For better cost control move AI services into separate resource groups - [Entra ID inventory](https://docs.rencore.com/governance/reference/inventory/azure-ad/): 22 object types Rencore Governance collects for Entra ID - [Entra ID: Registration Certificate](https://docs.rencore.com/governance/reference/inventory/azure-ad/appregistrationcertificateentity/): All application registration certificate of Entra ID - [Entra ID: Client secret](https://docs.rencore.com/governance/reference/inventory/azure-ad/appregistrationclientsecretentity/): All client secrets registered in Entra ID - [Entra ID: Application registration](https://docs.rencore.com/governance/reference/inventory/azure-ad/appregistrationentity/): All Entra ID application registrations - [Entra ID: App Role Assignment](https://docs.rencore.com/governance/reference/inventory/azure-ad/approleassignmententity/): All app role assignments in Entra ID - [Entra ID: App Role](https://docs.rencore.com/governance/reference/inventory/azure-ad/approleentity/): All app roles in Entra ID - [Entra ID: Deleted App Registration Certificate](https://docs.rencore.com/governance/reference/inventory/azure-ad/deletedappregistrationcertificateentity/): All deleted application registration certificate of Entra ID - [Entra ID: Deleted App Client secret](https://docs.rencore.com/governance/reference/inventory/azure-ad/deletedappregistrationclientsecretentity/): All deleted applications client secrets registered in Entra ID - [Entra ID: Deleted Application Registration](https://docs.rencore.com/governance/reference/inventory/azure-ad/deletedappregistrationentity/): All deleted applications registration in Entra ID - [Entra ID: Deleted Application Verified Publisher](https://docs.rencore.com/governance/reference/inventory/azure-ad/deletedappverifiedpublisherentity/): All verified publishers of deleted applications in Entra ID - [Entra ID: Device](https://docs.rencore.com/governance/reference/inventory/azure-ad/deviceentity/): All devices (computers, phones) that are registered in Entra ID - [Entra ID: Directory Role](https://docs.rencore.com/governance/reference/inventory/azure-ad/directoryroleentity/): All directory roles registered in Entra ID - [Entra ID: Domain](https://docs.rencore.com/governance/reference/inventory/azure-ad/domainentity/): All registered domains in Entra ID - [Entra ID: Enterprise Registration Certificate](https://docs.rencore.com/governance/reference/inventory/azure-ad/enterpriseappregistrationcertificateentity/): All enterprise application registration certificate of Entra ID - [Entra ID: Enterprise App Client secret](https://docs.rencore.com/governance/reference/inventory/azure-ad/enterpriseappregistrationclientsecretentity/): All enterprise applications client secrets registered in Entra ID - [Entra ID: Enterprise Application Verified Publisher](https://docs.rencore.com/governance/reference/inventory/azure-ad/enterpriseappverifiedpublisherentity/): All verified publishers of enterprise applications in Entra ID - [Entra ID: Enterprise Application](https://docs.rencore.com/governance/reference/inventory/azure-ad/enterpriseapplicationentity/): All registered Enterprise Applications in Entra ID - [Entra ID: Enterprise Application OAuth2 Permission Scope](https://docs.rencore.com/governance/reference/inventory/azure-ad/enterpriseapplicationoauth2permissionscopeentity/): All enterprise application OAuth2 permission scopes in Entra ID - [Entra ID: OAuth2 Permission Grant](https://docs.rencore.com/governance/reference/inventory/azure-ad/oauth2permissiongrantentity/): All OAuth permission grants in Entra ID - [Entra ID: OAuth2 Permission Scope](https://docs.rencore.com/governance/reference/inventory/azure-ad/oauth2permissionscopeentity/): All OAuth permission scopes in Entra ID - [Entra ID: Risky Entra ID Sign-In](https://docs.rencore.com/governance/reference/inventory/azure-ad/riskysigninactivityentity/): Shows Risky Entra ID Sign-Ins - [Entra ID: User Registration Credential](https://docs.rencore.com/governance/reference/inventory/azure-ad/userregistrationcredentialentity/): All Entra ID registration credentials of a user (MFA, Admin, Auth methods) - [Entra ID: Verified Publisher](https://docs.rencore.com/governance/reference/inventory/azure-ad/verifiedpublisherentity/): All verified publishers of application registrations in Entra ID - [Policies for Entra ID](https://docs.rencore.com/governance/reference/policies/azuread/): 14 built-in policies - [Entra ID policy: Applications with client secrets that are about to expire](https://docs.rencore.com/governance/reference/policies/azuread/applications-with-client-secrets-that-are-about-to-expire/): Shows Entra ID applications where client secrets expire in the next 30 days - [Entra ID policy: Applications with expired certificates](https://docs.rencore.com/governance/reference/policies/azuread/applications-with-expired-certificates/): Shows Entra ID applications with expired certificates - [Entra ID policy: Enterprise Applications Using Exchange Web Services (EWS)](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-using-exchange-web-services-ews/): This policy detects app registrations in Microsoft Entra ID with the EWS.AccessAsUser.All delegated API permission, which will be deprecated by Microsoft in October 2026. - [Entra ID policy: Enterprise applications that use SharePoint Online permissions](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-that-use-sharepoint-online-permissions/): Shows Enterprise applications that use SharePoint Online permissions - [Entra ID policy: Applications with expired client secrets](https://docs.rencore.com/governance/reference/policies/azuread/applications-with-expired-client-secrets/): Shows Entra ID applications with expired client secrets - [Entra ID policy: Application registrations without owners](https://docs.rencore.com/governance/reference/policies/azuread/application-registrations-without-owners/): Shows Application registrations without any owners - [Entra ID policy: Enterprise applications with Full Control or Write permissions](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-with-full-control-or-write-permissions/): Shows Enterprise applications with permissions that contain the words FullControl or Write - [Entra ID policy: Enterprise Applications without owners](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-without-owners/): Shows Enterprise Applications without owners (excluding first-party Microsoft apps) - [Entra ID policy: Risky Sign-Ins](https://docs.rencore.com/governance/reference/policies/azuread/risky-sign-ins/): Shows Sign-Ins with risk state "At Risk" - [Entra ID policy: Enterprise applications (SharePoint Add-Ins) with certificates or client secrets](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-sharepoint-add-ins-with-certificates-or-client-secrets/): Shows Enterprise applications with certificates or client secrets. In most cases these applications are SharePoint Add-Ins - [Entra ID policy: Applications with certificates that are about to expire](https://docs.rencore.com/governance/reference/policies/azuread/applications-with-certificates-that-are-about-to-expire/): Shows Entra ID applications where certificates expire in the next 30 days - [Entra ID policy: Enterprise applications that use Microsoft Graph permissions](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-that-use-microsoft-graph-permissions/): Shows Entra ID apps that use Microsoft Graph permissions - [Entra ID policy: Devices with disabled user accounts](https://docs.rencore.com/governance/reference/policies/azuread/devices-with-disabled-user-accounts/): Shows devices with disabled owners or user accounts - [Entra ID policy: Enterprise applications (SharePoint Add-Ins) with expired certificates or client secrets](https://docs.rencore.com/governance/reference/policies/azuread/enterprise-applications-sharepoint-add-ins-with-expired-certificates-or-client-secrets/): Shows Enterprise applications with expired certificates or client secrets. In most cases these applications are SharePoint Add-Ins - [Microsoft Foundry (Preview) inventory](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/): 6 object types Rencore Governance collects for Microsoft Foundry - [Microsoft Foundry (Preview): AI Agent](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaiagententity/): Azure AI projects are used to organize your work and save state while building customized AI apps - [Microsoft Foundry (Preview): LLM Deployment](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaideploymententity/): Azure AI Foundry supports deploying large language models (LLMs), flows, and web apps. Deploying an LLM or flow makes it available for use in a website, an application, or other production environments - [Microsoft Foundry (Preview): Finetune Job](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaifinetunejobentity/): Azure AI projects are used to organize your work and save state while building customized AI apps - [Microsoft Foundry (Preview): AI Hub](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaihubentity/): Azure AI hub which are the primary top-level Azure resources for Azure AI Foundry - [Microsoft Foundry (Preview): AI Project](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaiprojectentity/): Azure AI projects are used to organize your work and save state while building customized AI apps - [Microsoft Foundry (Preview): AI Service](https://docs.rencore.com/governance/reference/inventory/azure-ai-foundry/azureaiserviceentity/): Cloud-based artificial intelligence (AI) services that help developers build cognitive intelligence into applications - [ChatGPT Enterprise (Preview) inventory](https://docs.rencore.com/governance/reference/inventory/chat-gpt/): 33 object types Rencore Governance collects for ChatGPT Enterprise - [ChatGPT Enterprise (Preview): ChatGPT Activity](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptactivityentity/): Ingested ChatGPT activity: who did what and when, retained beyond OpenAI's 30-day window - [ChatGPT Enterprise (Preview): ChatGPT Agent](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptagententity/): Agents published into the ChatGPT workspace, with their skills, connectors, run history and spend - [ChatGPT Enterprise (Preview): ChatGPT Agent Run](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptagentrunentity/): Runs of ChatGPT workspace agents, by trigger type and invoker - [ChatGPT Enterprise (Preview): ChatGPT App Link](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptapplinkentity/): Third-party apps and MCP servers linked to ChatGPT accounts, derived from link and unlink events - [ChatGPT Enterprise (Preview): ChatGPT Automation](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptautomationentity/): Scheduled automations owned by ChatGPT users - [ChatGPT Enterprise (Preview): ChatGPT Canvas](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcanvasentity/): Canvases owned by ChatGPT users, by version count and last update - [ChatGPT Enterprise (Preview): ChatGPT Codex Code Review Metric](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodexcodereviewmetricentity/): Workspace-level Codex code-review activity per day - [ChatGPT Enterprise (Preview): ChatGPT Codex Daily Usage](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodexdailyusageentity/): Codex usage per user per day, with credits, cost, tokens and code attribution - [ChatGPT Enterprise (Preview): ChatGPT Codex Device](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodexdeviceentity/): Phones and tablets paired to drive Codex remote control - [ChatGPT Enterprise (Preview): ChatGPT Codex Environment](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodexenvironmententity/): Codex sandboxes, the repositories they reach and how widely they are shared - [ChatGPT Enterprise (Preview): ChatGPT Codex Machine](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodexmachineentity/): Developer machines running Codex remote control - [ChatGPT Enterprise (Preview): ChatGPT Codex Task](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcodextaskentity/): Codex cloud tasks, by creator, source and environment - [ChatGPT Enterprise (Preview): ChatGPT Connector Scope](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptconnectorscopeentity/): External data sources attached to ChatGPT projects, who added them and whether they still sync - [ChatGPT Enterprise (Preview): ChatGPT Conversation](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptconversationentity/): Conversations as objects: who, when, how many messages, which models, and which GPT or project - never the content - [ChatGPT Enterprise (Preview): ChatGPT Cost Line](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcostlineentity/): Daily ChatGPT cost lines by user, group, agent, product, surface and model - [ChatGPT Enterprise (Preview): ChatGPT Custom GPT](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptcustomgptentity/): Custom GPTs in the workspace, with their sharing visibility, configuration shape and usage - [ChatGPT Enterprise (Preview): ChatGPT Group](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptgroupentity/): ChatGPT groups, their membership source, their SCIM mapping and their default spend cap - [ChatGPT Enterprise (Preview): ChatGPT Group Usage Limit](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptgroupusagelimitentity/): The default monthly spend cap each ChatGPT group hands to its members - [ChatGPT Enterprise (Preview): ChatGPT Invitation](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptinvitationentity/): Invitations into the ChatGPT workspace, with their role, seat type and status - [ChatGPT Enterprise (Preview): ChatGPT Library File](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptlibraryfileentity/): Files in ChatGPT user libraries, by owner, size, state and lifecycle - [ChatGPT Enterprise (Preview): ChatGPT Limit Increase Request](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptlimitincreaserequestentity/): Requests for a higher ChatGPT spend cap, and how they were resolved - [ChatGPT Enterprise (Preview): ChatGPT Memory](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptmemoryentity/): Per-user memory footprint in ChatGPT, as counts and dates only - [ChatGPT Enterprise (Preview): ChatGPT Plugin](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptpluginentity/): Plugins in the ChatGPT workspace, their discoverability and the MCP servers and skills they bundle - [ChatGPT Enterprise (Preview): ChatGPT Project](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptprojectentity/): ChatGPT projects, with their sharing visibility, tools, connector scopes and usage - [ChatGPT Enterprise (Preview): ChatGPT Recording](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptrecordingentity/): Recordings owned by ChatGPT users, by duration and date only - transcripts are never read - [ChatGPT Enterprise (Preview): ChatGPT Service Account Credential](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptserviceaccountcredentialentity/): Credentials held by ChatGPT service accounts, with their scopes, expiry and revocation - [ChatGPT Enterprise (Preview): ChatGPT Service Account](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptserviceaccountentity/): Non-human identities in the ChatGPT workspace, with their credentials and share targets - [ChatGPT Enterprise (Preview): ChatGPT Service Account Share](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptserviceaccountshareentity/): Principals a ChatGPT service account is shared with, and the role they hold on it - [ChatGPT Enterprise (Preview): ChatGPT Skill](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptskillentity/): Skills available to ChatGPT workspace agents, with their creator and attachments - [ChatGPT Enterprise (Preview): ChatGPT User](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptuserentity/): Every user in the connected ChatGPT workspace, with role, seat, spend and the Entra ID join - [ChatGPT Enterprise (Preview): ChatGPT User Usage and Limit](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptuserusagelimitentity/): Each member's monthly spend cap, where it comes from, and live month-to-date usage - [ChatGPT Enterprise (Preview): ChatGPT Workspace](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptworkspaceentity/): The connected ChatGPT Enterprise workspace, its granted scopes and its coverage gaps - [ChatGPT Enterprise (Preview): ChatGPT Workspace Usage Limit](https://docs.rencore.com/governance/reference/inventory/chat-gpt/chatgptworkspaceusagelimitentity/): The workspace default spend cap - [Policies for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/policies/chatgpt/): 30 built-in policies - [ChatGPT Enterprise (Preview) policy: Agent runs without a human and reaches external systems](https://docs.rencore.com/governance/reference/policies/chatgpt/agent-runs-without-a-human-and-reaches-external-systems/): Detects published agents that ran from a schedule, webhook or API call in the last 30 days and can reach a connector - [ChatGPT Enterprise (Preview) policy: Codex seat with no Codex usage](https://docs.rencore.com/governance/reference/policies/chatgpt/codex-seat-with-no-codex-usage/): Detects users on a Codex seat who have not used Codex in 30 days - [ChatGPT Enterprise (Preview) policy: Connector scope failing to sync](https://docs.rencore.com/governance/reference/policies/chatgpt/connector-scope-failing-to-sync/): Detects external data sources attached to a project whose last sync failed - [ChatGPT Enterprise (Preview) policy: Pending invitation grants owner or admin rights](https://docs.rencore.com/governance/reference/policies/chatgpt/pending-invitation-grants-owner-or-admin-rights/): Detects pending invitations that would grant the owner or admin role on acceptance - [ChatGPT Enterprise (Preview) policy: Shared Codex environment with repository access](https://docs.rencore.com/governance/reference/policies/chatgpt/shared-codex-environment-with-repository-access/): Detects Codex sandboxes that are shared and can reach source repositories - [ChatGPT Enterprise (Preview) policy: Invitation sent to an external domain](https://docs.rencore.com/governance/reference/policies/chatgpt/invitation-sent-to-an-external-domain/): Detects invitations to addresses that match no Entra ID user or match a guest - [ChatGPT Enterprise (Preview) policy: Custom GPT calls an external domain without authentication](https://docs.rencore.com/governance/reference/policies/chatgpt/custom-gpt-calls-an-external-domain-without-authentication/): Detects custom actions that call an external host with no authentication configured - [ChatGPT Enterprise (Preview) policy: Group without a default spend limit](https://docs.rencore.com/governance/reference/policies/chatgpt/group-without-a-default-spend-limit/): Detects groups with no default cap, whose members fall through to the workspace default - [ChatGPT Enterprise (Preview) policy: Idle Codex machine still paired](https://docs.rencore.com/governance/reference/policies/chatgpt/idle-codex-machine-still-paired/): Detects developer machines not seen for 30 days that are still paired for remote control - [ChatGPT Enterprise (Preview) policy: Idle ChatGPT seat](https://docs.rencore.com/governance/reference/policies/chatgpt/idle-chatgpt-seat/): Detects users with no usage this month or last month - [ChatGPT Enterprise (Preview) policy: Inactive user still holding objects](https://docs.rencore.com/governance/reference/policies/chatgpt/inactive-user-still-holding-objects/): Detects inactive workspace users who still own GPTs, projects, agents, Codex environments or library files - [ChatGPT Enterprise (Preview) policy: Manually managed ChatGPT user](https://docs.rencore.com/governance/reference/policies/chatgpt/manually-managed-chatgpt-user/): Detects workspace users who are not provisioned through SCIM - [ChatGPT Enterprise (Preview) policy: ChatGPT login bypassed SSO](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-login-bypassed-sso/): Detects users who signed in with a password rather than through the identity provider in the last 30 days - [ChatGPT Enterprise (Preview) policy: Custom GPT with an inactive owner](https://docs.rencore.com/governance/reference/policies/chatgpt/custom-gpt-with-an-inactive-owner/): Detects custom GPTs whose owner is inactive or no longer in the workspace - [ChatGPT Enterprise (Preview) policy: ChatGPT project with an inactive owner](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-project-with-an-inactive-owner/): Detects ChatGPT projects whose owner is inactive or no longer in the workspace - [ChatGPT Enterprise (Preview) policy: Plugin listed to the whole workspace bundles an MCP server](https://docs.rencore.com/governance/reference/policies/chatgpt/plugin-listed-to-the-whole-workspace-bundles-an-mcp-server/): Detects discoverable plugins that install an MCP server any member can reach - [ChatGPT Enterprise (Preview) policy: Over-shared project with external data sources](https://docs.rencore.com/governance/reference/policies/chatgpt/over-shared-project-with-external-data-sources/): Detects ChatGPT projects that are broadly shared and also pull from an external system - [ChatGPT Enterprise (Preview) policy: Publicly reachable custom GPTs](https://docs.rencore.com/governance/reference/policies/chatgpt/publicly-reachable-custom-gpts/): Detects custom GPTs reachable outside the workspace by link or through the GPT store - [ChatGPT Enterprise (Preview) policy: Publicly reachable ChatGPT projects](https://docs.rencore.com/governance/reference/policies/chatgpt/publicly-reachable-chatgpt-projects/): Detects ChatGPT projects reachable outside the workspace or by every member - [ChatGPT Enterprise (Preview) policy: Service account credential expiring within 30 days](https://docs.rencore.com/governance/reference/policies/chatgpt/service-account-credential-expiring-within-30-days/): Detects active service account credentials that lapse in the next 30 days - [ChatGPT Enterprise (Preview) policy: ChatGPT user with no Entra ID identity](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-user-with-no-entra-id-identity/): Detects ChatGPT users who do not match any Entra ID user by email - [ChatGPT Enterprise (Preview) policy: Shared custom GPTs affected by the GPT retirement](https://docs.rencore.com/governance/reference/policies/chatgpt/shared-custom-gpts-affected-by-the-gpt-retirement/): Detects custom GPTs shared beyond their owner, which stop working when OpenAI retires custom GPTs - [ChatGPT Enterprise (Preview) policy: Stale custom GPT](https://docs.rencore.com/governance/reference/policies/chatgpt/stale-custom-gpt/): Detects custom GPTs whose configuration has not changed in 90 days - [ChatGPT Enterprise (Preview) policy: Stale invitation](https://docs.rencore.com/governance/reference/policies/chatgpt/stale-invitation/): Detects invitations still pending more than 30 days after they were sent - [ChatGPT Enterprise (Preview) policy: Stale ChatGPT project](https://docs.rencore.com/governance/reference/policies/chatgpt/stale-chatgpt-project/): Detects ChatGPT projects whose configuration has not changed in 90 days - [ChatGPT Enterprise (Preview) policy: ChatGPT workspace with too many admins](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-workspace-with-too-many-admins/): Detects workspaces where more than five users hold the admin role - [ChatGPT Enterprise (Preview) policy: ChatGPT user with no spend cap](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-user-with-no-spend-cap/): Detects users whose effective spend limit is unlimited - [ChatGPT Enterprise (Preview) policy: Unused Codex environment with repository access](https://docs.rencore.com/governance/reference/policies/chatgpt/unused-codex-environment-with-repository-access/): Detects Codex sandboxes that can reach repositories but have never run a task - [ChatGPT Enterprise (Preview) policy: ChatGPT user over 80% of their spend cap](https://docs.rencore.com/governance/reference/policies/chatgpt/chatgpt-user-over-80-of-their-spend-cap/): Detects users whose month-to-date usage has passed 80% of their effective cap - [ChatGPT Enterprise (Preview) policy: Workspace-wide custom GPTs with editable configuration](https://docs.rencore.com/governance/reference/policies/chatgpt/workspace-wide-custom-gpts-with-editable-configuration/): Detects custom GPTs every workspace member can reach and edit - [Automations for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/automations/chatgpt/): 18 automation templates - [Built-in actions for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/actions/chatgpt/): 9 built-in actions - [Claude Enterprise (Preview) inventory](https://docs.rencore.com/governance/reference/inventory/claude/): 21 object types Rencore Governance collects for Claude Enterprise - [Claude Enterprise (Preview): Claude Activity](https://docs.rencore.com/governance/reference/inventory/claude/claudeactivityentity/): Anthropic activity feed: who did what and when across the Claude Enterprise organizations - [Claude Enterprise (Preview): Claude Adoption Summary](https://docs.rencore.com/governance/reference/inventory/claude/claudeadoptionsummaryentity/): Org-level adoption per day: assigned seats, daily/weekly/monthly active users, monthly adoption rate, pending invites, and Cowork MAU - [Claude Enterprise (Preview): Claude Chat](https://docs.rencore.com/governance/reference/inventory/claude/claudechatentity/): All chats of the Claude Enterprise organization related to claude.ai excluding Claude Cowork and Claude Code - [Claude Enterprise (Preview): Claude Code Artifact](https://docs.rencore.com/governance/reference/inventory/claude/claudecodeartifactentity/): Published Claude Code artifacts in the Claude Enterprise organization with metadata only - [Claude Enterprise (Preview): Claude Compliance Access Key](https://docs.rencore.com/governance/reference/inventory/claude/claudecomplianceapikeyentity/): The Compliance Access Keys configured for the Claude Enterprise parent organization, including deactivated keys - [Claude Enterprise (Preview): Claude Connector Usage](https://docs.rencore.com/governance/reference/inventory/claude/claudeconnectorusageentity/): Per-connector and user usage of integrations and MCP servers in Chats, Code sessions, Cowork sessions and Claude in Office, with the read/write split and the kind of login used - [Claude Enterprise (Preview): Claude Group](https://docs.rencore.com/governance/reference/inventory/claude/claudegroupentity/): RBAC and SCIM-provisioned groups of the Claude Enterprise parent organization - [Claude Enterprise (Preview): Claude Linked Organization](https://docs.rencore.com/governance/reference/inventory/claude/claudelinkedorganizationentity/): The organizations linked under the Claude Enterprise parent organization - [Claude Enterprise (Preview): Claude Local Session](https://docs.rencore.com/governance/reference/inventory/claude/claudelocalsessionentity/): Claude Cowork and Claude Code sessions on the users' machine - [Claude Enterprise (Preview): Claude Organization Setting](https://docs.rencore.com/governance/reference/inventory/claude/claudeorganizationsettingentity/): The effective admin settings of each linked organization - [Claude Enterprise (Preview): Claude Plugin Usage](https://docs.rencore.com/governance/reference/inventory/claude/claudepluginusageentity/): Per-plugin and user installs and invocations of Claude Code and Cowork plugins, with the plugin identity and the marketplace it comes from - [Claude Enterprise (Preview): Claude Project Attachment](https://docs.rencore.com/governance/reference/inventory/claude/claudeprojectattachmententity/): Documents attached to claude.ai projects with metadata only - [Claude Enterprise (Preview): Claude Project Collaborator](https://docs.rencore.com/governance/reference/inventory/claude/claudeprojectcollaboratorentity/): Active role assignments on claude.ai projects: individual users, RBAC groups, whole organizations, or all holders of an organization-level role - [Claude Enterprise (Preview): Claude Project](https://docs.rencore.com/governance/reference/inventory/claude/claudeprojectentity/): All projects of the Claude Enterprise organization related to claude.ai excluding Claude Cowork and Claude Code - [Claude Enterprise (Preview): Claude Remote Session](https://docs.rencore.com/governance/reference/inventory/claude/clauderemotesessionentity/): Claude Cowork sessions running in Anthropic's managed environments - [Claude Enterprise (Preview): Claude Role](https://docs.rencore.com/governance/reference/inventory/claude/clauderoleentity/): RBAC roles defined in organizations linked to the Enterprise parent organization - [Claude Enterprise (Preview): Claude Skill Usage](https://docs.rencore.com/governance/reference/inventory/claude/claudeskillusageentity/): Per-skill and user usage in Chats, Code sessions, and Cowork sessions for all skills - [Claude Enterprise (Preview): Claude Spend Limit](https://docs.rencore.com/governance/reference/inventory/claude/claudespendlimitentity/): Each Enterprise member's effective spend limit: amount, period, source (seat-tier default vs explicitly set), and period-to-date spend - [Claude Enterprise (Preview): Claude User Cost](https://docs.rencore.com/governance/reference/inventory/claude/claudeusercostentity/): Per-user, per-product (Chat, Code, Cowork) cost with actual vs. list amount and request counts - [Claude Enterprise (Preview): Claude User](https://docs.rencore.com/governance/reference/inventory/claude/claudeuserentity/): Every member across organizations - [Claude Enterprise (Preview): Claude User Usage](https://docs.rencore.com/governance/reference/inventory/claude/claudeuserusageentity/): Per-user, per-product (Chat, Code, Cowork) token consumption split by input, cache and output tokens - [Policies for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/policies/claude/): 17 built-in policies - [Claude Enterprise (Preview) policy: Code artifact publicly readable](https://docs.rencore.com/governance/reference/policies/claude/code-artifact-publicly-readable/): Detects Code artifacts whose read mode makes them readable by anyone on the internet - [Claude Enterprise (Preview) policy: Claude Code user is disabled in Entra ID](https://docs.rencore.com/governance/reference/policies/claude/claude-code-user-is-disabled-in-entra-id/): Detects Claude users which have been disabled in Entra ID and should be removed - [Claude Enterprise (Preview) policy: Connector used with a personal login](https://docs.rencore.com/governance/reference/policies/claude/connector-used-with-a-personal-login/): Detects connectors that people connected with their own credential instead of the company-managed login, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) policy: Connector performs write actions](https://docs.rencore.com/governance/reference/policies/claude/connector-performs-write-actions/): Detects connectors that changed data in other systems rather than only reading it, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) policy: External users in Claude organization](https://docs.rencore.com/governance/reference/policies/claude/external-users-in-claude-organization/): Detects users flagged as external in the corporate directory who have Claude access - [Claude Enterprise (Preview) policy: Claude Organization with not enough admins](https://docs.rencore.com/governance/reference/policies/claude/claude-organization-with-not-enough-admins/): Detects organizations with only 1 or less admin - [Claude Enterprise (Preview) policy: Claude Organization with too many admins](https://docs.rencore.com/governance/reference/policies/claude/claude-organization-with-too-many-admins/): Detects organizations where too many users are admins - [Claude Enterprise (Preview) policy: Single sign-on not enforced](https://docs.rencore.com/governance/reference/policies/claude/single-sign-on-not-enforced/): Detects organizations where the sso_enforced setting is present but disabled - [Claude Enterprise (Preview) policy: Plugin from outside the official directory](https://docs.rencore.com/governance/reference/policies/claude/plugin-from-outside-the-official-directory/): Detects plugins in use whose identity does not point at the official Anthropic plugin directory, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) policy: Claude project is empty](https://docs.rencore.com/governance/reference/policies/claude/claude-project-is-empty/): Detects Claude projects that hold neither a chat nor an attachment and are therefore unused - [Claude Enterprise (Preview) policy: Project visible to the whole organization](https://docs.rencore.com/governance/reference/policies/claude/project-visible-to-the-whole-organization/): Detects Claude projects that are not private and therefore visible to every organization member - [Claude Enterprise (Preview) policy: Claude project not updated in 90 days](https://docs.rencore.com/governance/reference/policies/claude/claude-project-not-updated-in-90-days/): Detects Claude projects whose last update is more than 90 days old and which are therefore likely abandoned - [Claude Enterprise (Preview) policy: Remote session left unfinished](https://docs.rencore.com/governance/reference/policies/claude/remote-session-left-unfinished/): Detects remote sessions that are still in a running state but have not been updated in more than 30 days - [Claude Enterprise (Preview) policy: No spend limit configured](https://docs.rencore.com/governance/reference/policies/claude/no-spend-limit-configured/): Detects scopes whose effective spend limit is unlimited, leaving costs uncapped - [Claude Enterprise (Preview) policy: Spend limit over 80% consumed](https://docs.rencore.com/governance/reference/policies/claude/spend-limit-over-80-consumed/): Detects effective spend limits whose current consumption exceeds 80% of the configured limit - [Claude Enterprise (Preview) policy: Unidentified plugin activity](https://docs.rencore.com/governance/reference/policies/claude/unidentified-plugin-activity/): Detects activity in the combined third-party bucket, where plugins run that the Claude Console analytics cannot name, on the Enterprise plan - [Claude Enterprise (Preview) policy: Claude User is not member of Entra ID](https://docs.rencore.com/governance/reference/policies/claude/claude-user-is-not-member-of-entra-id/): Detects users in Claude organizations which are not part of Entra ID - [Automations for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/automations/claude/): 2 automation templates - [Built-in actions for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/actions/claude/): 1 built-in actions - [Copilot inventory](https://docs.rencore.com/governance/reference/inventory/copilot/): 5 object types Rencore Governance collects for Copilot - [Copilot: M365 Copilot session](https://docs.rencore.com/governance/reference/inventory/copilot/copilotaiinteractionhistorysessionentity/): All Microsoft 365 Copilot sessions - [Copilot: Summary of active user (Report)](https://docs.rencore.com/governance/reference/inventory/copilot/copilotusageusercountssummaryentity/): Get the aggregated number of active and enabled users of Microsoft 365 Copilot for a specified time period - [Copilot: Trend of daily active user (Report)](https://docs.rencore.com/governance/reference/inventory/copilot/copilotusageusercountstrendentity/): Get the trend in the daily number of active and enabled users of Microsoft 365 Copilot for a specified time period - [Copilot: Copilot user activity (Report)](https://docs.rencore.com/governance/reference/inventory/copilot/copilotusageuserdetailsentity/): Get the most recent activity data for enabled users of Microsoft 365 Copilot apps - [Copilot: External Graph Connection](https://docs.rencore.com/governance/reference/inventory/copilot/graphexternalconnectionentity/): Microsoft Graph connectors are used to index third-party data, ensuring it appears Microsoft 365 Copilot results - [Policies for Copilot](https://docs.rencore.com/governance/reference/policies/copilot/): 5 built-in policies - [Copilot policy: Copilot Adoption Opportunity - E3/E5 Users](https://docs.rencore.com/governance/reference/policies/copilot/copilot-adoption-opportunity-e3-e5-users/): Identifies E3/E5 licensed users eligible for Copilot, helping prioritize rollout to users with necessary prerequisites. - [Copilot policy: Copilot License Assigned to Disabled Account](https://docs.rencore.com/governance/reference/policies/copilot/copilot-license-assigned-to-disabled-account/): Flags disabled accounts retaining active Copilot licenses, enabling immediate cost recovery through license reassignment. - [Copilot policy: External Website Data Source Risk](https://docs.rencore.com/governance/reference/policies/copilot/external-website-data-source-risk/): External connections that load data from websites into M365 Copilot can introduce unverified, outdated, or malicious information, leading to incorrect results or risks. - [Copilot policy: Inactive Copilot Users - 30 Days](https://docs.rencore.com/governance/reference/policies/copilot/inactive-copilot-users-30-days/): Reports on users with unused Copilot licenses for 30+ days, enabling proactive engagement or license reallocation. This policy only works correctly with non-anonymized data. - [Copilot policy: Missing External Connection Documentation](https://docs.rencore.com/governance/reference/policies/copilot/missing-external-connection-documentation/): Flags external connections lacking descriptions, ensuring users understand data sources in their Copilot results. - [Copilot Studio inventory](https://docs.rencore.com/governance/reference/inventory/copilot-studio/): 12 object types Rencore Governance collects for Copilot Studio - [Copilot Studio: Action](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotactionentity/): Actions used by Copilot Agent - [Copilot Studio: Agent Flow](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotagentflowentity/): Agent Flows created inside Copilot Studio - [Copilot Studio: Agent Conversation](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotconversationentity/): Conversations of users with agent - [Copilot Studio: Environment](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotenvironmententity/): All Copilot environments in your tenant - [Copilot Studio: Knowledge](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotknowledgeentity/): Used knowledge in Copliot Agent - [Copilot Studio: Daily Costs](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotstudiobillingpolicycostsentity/): Current daily costs for Pay as you go and Dataverse - [Copilot Studio: Pay-as-you-go Plan](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilotstudiobillingpolicyentity/): A pay-as-you-go plan is a group of one or more environments that you can configure to bill to Azure - [Copilot Studio: Tenant Settings](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilottenantsettingsentity/): Copilot Studio related tenant settings - [Copilot Studio: Topic](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilottopicentity/): Topics of Copilot Agent - [Copilot Studio: Trigger](https://docs.rencore.com/governance/reference/inventory/copilot-studio/copilottriggerentity/): Triggers that start a Copilot agent - [Copilot Studio: Copilot Agent](https://docs.rencore.com/governance/reference/inventory/copilot-studio/customcopilotentity/): Agents created inside Copilot Studio - [Copilot Studio: Microsoft Copilot](https://docs.rencore.com/governance/reference/inventory/copilot-studio/microsoftcopilotentity/): All Microsoft Copilots - [Policies for Copilot Studio](https://docs.rencore.com/governance/reference/policies/copilotstudio/): 10 built-in policies - [Copilot Studio policy: Autonomous Copilot Agent Risk](https://docs.rencore.com/governance/reference/policies/copilotstudio/autonomous-copilot-agent-risk/): Identifies agents operating without user interaction via email or scheduled triggers, requiring additional oversight - [Copilot Studio policy: Autonomous Copilot Agent with Scheduled Trigger](https://docs.rencore.com/governance/reference/policies/copilotstudio/autonomous-copilot-agent-with-scheduled-trigger/): Flags agents with automated recurring execution that may generate uncontrolled costs without human oversight - [Copilot Studio policy: Confidential Site Referenced in Copilot Agent](https://docs.rencore.com/governance/reference/policies/copilotstudio/confidential-site-referenced-in-copilot-agent/): Detects agents connected to SharePoint sites labeled with sensitivity classifications, risking unauthorized data access - [Copilot Studio policy: Excessive Draft Agent Creation Pattern](https://docs.rencore.com/governance/reference/policies/copilotstudio/excessive-draft-agent-creation-pattern/): Flags users creating 5+ unpublished agents, indicating potential training needs or cleanup requirements - [Copilot Studio policy: External Web Content Dependency Risk](https://docs.rencore.com/governance/reference/policies/copilotstudio/external-web-content-dependency-risk/): Identifies agents relying on public websites as knowledge sources, creating reliability and content control risks - [Copilot Studio policy: Orphaned Copilot Agent Ownership Gap](https://docs.rencore.com/governance/reference/policies/copilotstudio/orphaned-copilot-agent-ownership-gap/): Detects agents without assigned owners or only disabled owners, creating accountability gaps for maintenance, costs, and compliance - [Copilot Studio policy: PAYG Plan Limit Exceeded - 7 Days](https://docs.rencore.com/governance/reference/policies/copilotstudio/payg-plan-limit-exceeded-7-days/): Flags pay-as-you-go plans that exceed a billing amount of 250 within 7 days, requiring billing plan review - [Copilot Studio policy: Stale Unpublished Copilot Agents - 30 Days](https://docs.rencore.com/governance/reference/policies/copilotstudio/stale-unpublished-copilot-agents-30-days/): Identifies agents created but unpublished for 30+ days, indicating abandoned development efforts consuming resources - [Copilot Studio policy: Unauthenticated Public Agent Security Risk](https://docs.rencore.com/governance/reference/policies/copilotstudio/unauthenticated-public-agent-security-risk/): Identifies agents exposed publicly without authentication requirements, creating security risks requiring remediation - [Copilot Studio policy: Unused Agent Cleanup Candidate - 90 Days](https://docs.rencore.com/governance/reference/policies/copilotstudio/unused-agent-cleanup-candidate-90-days/): Flags inactive agents with no usage for 90+ days as candidates for cleanup to reduce sprawl - [Exchange inventory](https://docs.rencore.com/governance/reference/inventory/exchange/): 2 object types Rencore Governance collects for Exchange - [Exchange: Redirect Rule](https://docs.rencore.com/governance/reference/inventory/exchange/messageredirectruleentity/): All registered Exchange mailbox redirect rules - [Exchange: Mailbox](https://docs.rencore.com/governance/reference/inventory/exchange/usermailboxentity/): All Exchange mailboxes of your users, rooms & equipment - [Policies for Exchange](https://docs.rencore.com/governance/reference/policies/exchange/): 1 built-in policies - [Exchange policy: Mailboxes with external redirect rules](https://docs.rencore.com/governance/reference/policies/exchange/mailboxes-with-external-redirect-rules/): Shows mailboxes which have redirect rules that redirect to external domains - [Microsoft 365 inventory](https://docs.rencore.com/governance/reference/inventory/office365-groups/): 11 object types Rencore Governance collects for Microsoft 365 - [Microsoft 365: Deleted Group](https://docs.rencore.com/governance/reference/inventory/office365-groups/deletedgroupentity/): All groups that have been deleted from your tenant - [Microsoft 365: Deleted User](https://docs.rencore.com/governance/reference/inventory/office365-groups/deleteduserentity/): All users that have been deleted from your tenant - [Microsoft 365: Group](https://docs.rencore.com/governance/reference/inventory/office365-groups/groupentity/): All Entra ID groups in your Tenant (Security groups, Microsoft 365 groups) - [Microsoft 365: Subscription](https://docs.rencore.com/governance/reference/inventory/office365-groups/licenseentity/): All subscriptions with their licenses available in your tenant - [Microsoft 365: Message Center Message](https://docs.rencore.com/governance/reference/inventory/office365-groups/messagecenterentity/): All messages from the Microsoft 365 Message Center - [Microsoft 365: Rooms & Equipment](https://docs.rencore.com/governance/reference/inventory/office365-groups/placeentity/): All rooms and equipment configured in your tenant - [Microsoft 365: Sensitivity Label](https://docs.rencore.com/governance/reference/inventory/office365-groups/sensitivitylabelentity/): All sensitivity labels configured in your tenant - [Microsoft 365: Service Assignment](https://docs.rencore.com/governance/reference/inventory/office365-groups/serviceplanassignmententity/): Details when a service or app has been assigned to the user - [Microsoft 365: App](https://docs.rencore.com/governance/reference/inventory/office365-groups/serviceplanentity/): All Microsoft 365 apps included in your available subscriptions - [Microsoft 365: User Activity](https://docs.rencore.com/governance/reference/inventory/office365-groups/useractivityentity/): Details when a Microsoft 365 service has been used the last time by a specific user - [Microsoft 365: User](https://docs.rencore.com/governance/reference/inventory/office365-groups/userentity/): All users registered in your tenant (internal, external) - [Policies for Microsoft 365](https://docs.rencore.com/governance/reference/policies/office365groups/): 29 built-in policies - [Microsoft 365 policy: Licenses assigned to external users](https://docs.rencore.com/governance/reference/policies/office365groups/licenses-assigned-to-external-users/): Shows licenses which are assigned to external users and could be removed or might unnecessary - [Microsoft 365 policy: Licenses assigned to inactive users](https://docs.rencore.com/governance/reference/policies/office365groups/licenses-assigned-to-inactive-users/): Shows licenses which are users that have not signed in in last 90 days - [Microsoft 365 policy: External users](https://docs.rencore.com/governance/reference/policies/office365groups/external-users/): Shows external users (users with user type 'Guest') - [Microsoft 365 policy: Licenses assigned to disabled users](https://docs.rencore.com/governance/reference/policies/office365groups/licenses-assigned-to-disabled-users/): Shows licenses which are assigned to users with account enabled set to false - [Microsoft 365 policy: Groups with disabled user accounts](https://docs.rencore.com/governance/reference/policies/office365groups/groups-with-disabled-user-accounts/): Shows groups with users (owners and members) that have disabled accounts - [Microsoft 365 policy: Licenses with less than 10 units available](https://docs.rencore.com/governance/reference/policies/office365groups/licenses-with-less-than-10-units-available/): Shows licenses with less than 10 units available to assign to users. - [Microsoft 365 policy: External Users with pending acceptance](https://docs.rencore.com/governance/reference/policies/office365groups/external-users-with-pending-acceptance/): External users which have not accepted invitation to your tenant - [Microsoft 365 policy: Users with Power Platform Premium License](https://docs.rencore.com/governance/reference/policies/office365groups/users-with-power-platform-premium-license/): Users with assigned Premium License for Power Platform (per user plan) - [Microsoft 365 policy: Users with E3 license not using Outlook in last 12 month](https://docs.rencore.com/governance/reference/policies/office365groups/users-with-e3-license-not-using-outlook-in-last-12-month/): Show Users with E3 license not using Outlook in last 12 month. - [Microsoft 365 policy: License usage for Visio, Project and Power BI Pro](https://docs.rencore.com/governance/reference/policies/office365groups/license-usage-for-visio-project-and-power-bi-pro/): Shows units consumed for critical licenses like Visio, Project and Power BI Pro - [Microsoft 365 policy: Users with passwords not changed in last 6 months](https://docs.rencore.com/governance/reference/policies/office365groups/users-with-passwords-not-changed-in-last-6-months/): Shows users that have not changed their password for more than 6 months - [Microsoft 365 policy: Disabled user accounts](https://docs.rencore.com/governance/reference/policies/office365groups/disabled-user-accounts/): Shows all disabled user accounts - [Microsoft 365 policy: Licenses with unused seats](https://docs.rencore.com/governance/reference/policies/office365groups/licenses-with-unused-seats/): Shows licenses which have a high number of unused seats - [Microsoft 365 policy: Admin accounts with an Office 365 E3 license assigned](https://docs.rencore.com/governance/reference/policies/office365groups/admin-accounts-with-an-office-365-e3-license-assigned/): Admin accounts with an Office 365 E3 license assigned (Note: please adjust the email address, prefix or postfix to your company settings) - [Microsoft 365 policy: Administrators without MFA](https://docs.rencore.com/governance/reference/policies/office365groups/administrators-without-mfa/): Shows administrators that have not activated multi factor authentication - [Microsoft 365 policy: External users invited 3 month ago with pending acceptance](https://docs.rencore.com/governance/reference/policies/office365groups/external-users-invited-3-month-ago-with-pending-acceptance/): Shows external users invited more than 3 month ago that have not accepted invitation to the tenant - [Microsoft 365 policy: Disabled room/place accounts](https://docs.rencore.com/governance/reference/policies/office365groups/disabled-room-place-accounts/): Shows rooms/places with disabled accounts - [Microsoft 365 policy: Disabled user accounts with assigned licenses](https://docs.rencore.com/governance/reference/policies/office365groups/disabled-user-accounts-with-assigned-licenses/): Shows disabled user accounts which have any licenses assigned - [Microsoft 365 policy: Groups with external users](https://docs.rencore.com/governance/reference/policies/office365groups/groups-with-external-users/): Shows groups that have external users - [Microsoft 365 policy: Global administrators without MFA](https://docs.rencore.com/governance/reference/policies/office365groups/global-administrators-without-mfa/): Shows global administrators that have not activated multi factor authentication - [Microsoft 365 policy: Groups with external owners](https://docs.rencore.com/governance/reference/policies/office365groups/groups-with-external-owners/): Shows groups that have external users as owners - [Microsoft 365 policy: Groups with very few owners](https://docs.rencore.com/governance/reference/policies/office365groups/groups-with-very-few-owners/): Shows Groups which have fewer owners than defined threshold (default 2 owners) - [Microsoft 365 policy: Guest users with a Dynamics license assigned](https://docs.rencore.com/governance/reference/policies/office365groups/guest-users-with-a-dynamics-license-assigned/): Guest users with a Dynamics license assigned - [Microsoft 365 policy: Inactive external users](https://docs.rencore.com/governance/reference/policies/office365groups/inactive-external-users/): Shows external users that have not signed in for more than 6 month - [Microsoft 365 policy: Inactive internal users](https://docs.rencore.com/governance/reference/policies/office365groups/inactive-internal-users/): Shows internal users that have not signed in for more than 6 month - [Microsoft 365 policy: Over-licensed user Accounts](https://docs.rencore.com/governance/reference/policies/office365groups/over-licensed-user-accounts/): User accounts that have more than one License assigned with overlapping apps. - [Microsoft 365 policy: Service plans assigned in the last 4 weeks](https://docs.rencore.com/governance/reference/policies/office365groups/service-plans-assigned-in-the-last-4-weeks/): Shows service plans assigned to users in the last 4 weeks - [Microsoft 365 policy: Unused Licenses](https://docs.rencore.com/governance/reference/policies/office365groups/unused-licenses/): Shows M365 licenses with more enabled units than consumed units - [Microsoft 365 policy: Users who are creating Microsoft Loop Teams Components](https://docs.rencore.com/governance/reference/policies/office365groups/users-who-are-creating-microsoft-loop-teams-components/): A list of users that are creating Microsoft Loop components in their OneDrive - [Automations for Microsoft 365](https://docs.rencore.com/governance/reference/automations/office365groups/): 4 automation templates - [Built-in actions for Microsoft 365](https://docs.rencore.com/governance/reference/actions/office365groups/): 24 built-in actions - [OneDrive inventory](https://docs.rencore.com/governance/reference/inventory/onedrive/): 4 object types Rencore Governance collects for OneDrive - [OneDrive: OneDrive](https://docs.rencore.com/governance/reference/inventory/onedrive/onedriveentity/): All of your users OneDrives in your tenant - [OneDrive: File](https://docs.rencore.com/governance/reference/inventory/onedrive/onedrivesearchfileentity/): All OneDrive files stored in a library of a OneDrive - [OneDrive: Folder](https://docs.rencore.com/governance/reference/inventory/onedrive/onedrivesearchfolderentity/): All OneDrive folders stored in a library of a OneDrive - [OneDrive: File Sharing](https://docs.rencore.com/governance/reference/inventory/onedrive/onedrivesharingentity/): All shared OneDrives items with their sharing information - [Policies for OneDrive](https://docs.rencore.com/governance/reference/policies/onedrive/): 7 built-in policies - [OneDrive policy: OneDrive file is older than 5 years](https://docs.rencore.com/governance/reference/policies/onedrive/onedrive-file-is-older-than-5-years/): Detects OneDrive files that have not been modified in over five years, increasing storage redundancy and impacting AI accuracy. - [OneDrive policy: OneDrive file is shared with external users](https://docs.rencore.com/governance/reference/policies/onedrive/onedrive-file-is-shared-with-external-users/): Identifies OneDrive files that have been shared externally, increasing the risk of data leakage. - [OneDrive policy: OneDrives near storage limit](https://docs.rencore.com/governance/reference/policies/onedrive/onedrives-near-storage-limit/): Shows OneDrives using more than 90% of their available storage space - [OneDrive policy: OneDrive contains files from disabled user accounts](https://docs.rencore.com/governance/reference/policies/onedrive/onedrive-contains-files-from-disabled-user-accounts/): Highlights OneDrive files stored in accounts that have been disabled, creating compliance and security concerns. - [OneDrive policy: OneDrive contains at least one externally shared file](https://docs.rencore.com/governance/reference/policies/onedrive/onedrive-contains-at-least-one-externally-shared-file/): Identifies OneDrive accounts where at least one file is shared externally, posing potential data security risks. - [OneDrive policy: Large OneDrive Sites](https://docs.rencore.com/governance/reference/policies/onedrive/large-onedrive-sites/): Show OneDrive Site with more than 100GB data - [OneDrive policy: OneDrive belongs to a disabled user account](https://docs.rencore.com/governance/reference/policies/onedrive/onedrive-belongs-to-a-disabled-user-account/): Finds OneDrive accounts linked to disabled user accounts that should be reassigned or deprovisioned. - [Automations for OneDrive](https://docs.rencore.com/governance/reference/automations/onedrive/): 3 automation templates - [Built-in actions for OneDrive](https://docs.rencore.com/governance/reference/actions/onedrive/): 3 built-in actions - [Planner inventory](https://docs.rencore.com/governance/reference/inventory/planner/): 1 object type Rencore Governance collects for Planner - [Planner: Plan](https://docs.rencore.com/governance/reference/inventory/planner/plannerplanentity/): All Planner plans - [Power Apps inventory](https://docs.rencore.com/governance/reference/inventory/power-apps/): 4 object types Rencore Governance collects for Power Apps - [Power Apps: Connection](https://docs.rencore.com/governance/reference/inventory/power-apps/powerappconnectionentity/): All Power App connections used by your Power Apps - [Power Apps: Power App (Canvas App)](https://docs.rencore.com/governance/reference/inventory/power-apps/powerappentity/): All Power Apps (Canvas Apps) in your tenant - [Power Apps: Environment](https://docs.rencore.com/governance/reference/inventory/power-apps/powerappenvironmententity/): All Power App environments in your tenant - [Power Apps: Version](https://docs.rencore.com/governance/reference/inventory/power-apps/powerappversionentity/): All versions of your Power Apps - [Policies for Power Apps](https://docs.rencore.com/governance/reference/policies/powerapps/): 3 built-in policies - [Power Apps policy: Power Apps requiring a premium license](https://docs.rencore.com/governance/reference/policies/powerapps/power-apps-requiring-a-premium-license/): Shows Power Apps with premium connectors, custom connectors, common data service etc. - [Power Apps policy: Power Apps (Canvas Apps) without Owners](https://docs.rencore.com/governance/reference/policies/powerapps/power-apps-canvas-apps-without-owners/): Shows PowerApps with no Owners - [Power Apps policy: Power Apps (Canvas Apps) shared with everyone](https://docs.rencore.com/governance/reference/policies/powerapps/power-apps-canvas-apps-shared-with-everyone/): Shows Power Apps that all users of current tenant can viewed and used. - [Automations for Power Apps](https://docs.rencore.com/governance/reference/automations/powerapps/): 4 automation templates - [Built-in actions for Power Apps](https://docs.rencore.com/governance/reference/actions/powerapps/): 4 built-in actions - [Power Automate inventory](https://docs.rencore.com/governance/reference/inventory/power-automate/): 6 object types Rencore Governance collects for Power Automate - [Power Automate: Action](https://docs.rencore.com/governance/reference/inventory/power-automate/flowactionentity/): All Flow Actions used by your Flows - [Power Automate: Connection](https://docs.rencore.com/governance/reference/inventory/power-automate/flowconnectionentity/): All Flow connections used by your Flows - [Power Automate: Flow](https://docs.rencore.com/governance/reference/inventory/power-automate/flowentity/): All Power Automate Flows in your tenant - [Power Automate: Environment](https://docs.rencore.com/governance/reference/inventory/power-automate/flowenvironmententity/): All Power Automate environments in your tenant - [Power Automate: Run](https://docs.rencore.com/governance/reference/inventory/power-automate/flowrunentity/): All Flow Runs of your Flows - [Power Automate: Trigger](https://docs.rencore.com/governance/reference/inventory/power-automate/flowtriggerentity/): All Flow triggers used by your Flows - [Policies for Power Automate](https://docs.rencore.com/governance/reference/policies/powerautomate/): 13 built-in policies - [Power Automate policy: Flows with many runs in last 30 days](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-with-many-runs-in-last-30-days/): Shows flows with run count exceeds defined value (default 100 runs) - [Power Automate policy: Flows requiring a premium license](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-requiring-a-premium-license/): Shows Flows with premium connectors, premium actions or premium triggers (e.g. common data service) - [Power Automate policy: Complex Flows](https://docs.rencore.com/governance/reference/policies/powerautomate/complex-flows/): Flows with many actions (default 20+), that might require additional documentation - [Power Automate policy: Long running Flows](https://docs.rencore.com/governance/reference/policies/powerautomate/long-running-flows/): Shows Flows that ran for a longer period (default 3 hours) - [Power Automate policy: Flows with errors](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-with-errors/): Shows Flows that have failed runs and might not function as intended - [Power Automate policy: Flows not shared with specific service account](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-not-shared-with-specific-service-account/): Shows all Flows that are not shared with a specified service account (adjust account in Policy) - [Power Automate policy: Stopped Flows](https://docs.rencore.com/governance/reference/policies/powerautomate/stopped-flows/): Shows Flows that have stopped - [Power Automate policy: Flows without runs](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-without-runs/): Shows Flows that have never been used. Warning: Flows with runs that happened before the first flow scan of Rencore Governance occurred will not be found. - [Power Automate policy: New Flows](https://docs.rencore.com/governance/reference/policies/powerautomate/new-flows/): Shows Flows created in the last defined number of days (default 30 days) - [Power Automate policy: Flows that use a specific connector](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-that-use-a-specific-connector/): Shows Flows that use a specific connector (default Twitter) - [Power Automate policy: Unused Flows](https://docs.rencore.com/governance/reference/policies/powerautomate/unused-flows/): Shows Flows created more than 30 days ago that haven't run in more than 180 days - [Power Automate policy: Flows without Owners](https://docs.rencore.com/governance/reference/policies/powerautomate/flows-without-owners/): Shows Flows that have no Flow Owners - [Power Automate policy: Stopped Flows Last Week with errors](https://docs.rencore.com/governance/reference/policies/powerautomate/stopped-flows-last-week-with-errors/): Shows Flows that have stopped - [Automations for Power Automate](https://docs.rencore.com/governance/reference/automations/powerautomate/): 2 automation templates - [Built-in actions for Power Automate](https://docs.rencore.com/governance/reference/actions/powerautomate/): 4 built-in actions - [Power BI inventory](https://docs.rencore.com/governance/reference/inventory/power-bi/): 12 object types Rencore Governance collects for Power BI - [Power BI: Activity Event](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbiactivityevententity/): Lists activity events for PowerBI - [Power BI: App](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbiappentity/): Apps in PowerBI - [Power BI: Artifacts published to Web](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbiartifactspublishedtowebentity/): Lists artifacts published to Web for PowerBI - [Power BI: Capacity](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbicapacityentity/): Lists capacities for PowerBI - [Power BI: Dashboard](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbidashboardentity/): Lists dashboards for PowerBI - [Power BI: Dataflow](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbidataflowentity/): Lists dataflows for PowerBI - [Power BI: Dataset](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbidatasetentity/): Lists datasets for PowerBI - [Power BI: Datamart](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbidatamartentity/): Lists datamarts for PowerBI - [Power BI: Pipeline](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbipipelineentity/): Lists pipelines for PowerBI - [Power BI: Report](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbireportentity/): Lists reports for PowerBI - [Power BI: Workspace](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbiworkspaceentity/): Lists workspaces for PowerBI - [Power BI: Unused Artifact](https://docs.rencore.com/governance/reference/inventory/power-bi/powerbiworkspaceunusedartifactentity/): List datasets, reports, and dashboards that have not been used within 30 days - [Policies for Power BI](https://docs.rencore.com/governance/reference/policies/powerbi/): 10 built-in policies - [Power BI policy: Empty Workspace Cleanup Alert](https://docs.rencore.com/governance/reference/policies/powerbi/empty-workspace-cleanup-alert/): Identifies unused workspace containers that should be removed to maintain environment cleanliness - [Power BI policy: External Sharing Risk with External Users](https://docs.rencore.com/governance/reference/policies/powerbi/external-sharing-risk-with-external-users/): Identifies reports with external access permissions that may violate data protection policies - [Power BI policy: Inactive Power BI Content Alert](https://docs.rencore.com/governance/reference/policies/powerbi/inactive-power-bi-content-alert/): Identifies all unused content types for possible archiving or removal to improve environment efficiency - [Power BI policy: Inactive Power BI Reports](https://docs.rencore.com/governance/reference/policies/powerbi/inactive-power-bi-reports/): Identifies specifically reports without recent activity for review and potential archiving - [Power BI policy: Inactive Power BI Workspaces](https://docs.rencore.com/governance/reference/policies/powerbi/inactive-power-bi-workspaces/): Identifies workspaces without user activity that may be candidates for archiving or consolidation (30 days) - [Power BI policy: Orphaned Power BI Datasets](https://docs.rencore.com/governance/reference/policies/powerbi/orphaned-power-bi-datasets/): Identifies datasets not connected to any reports that may be consuming resources unnecessarily - [Power BI policy: Power BI Dashboards with External Access](https://docs.rencore.com/governance/reference/policies/powerbi/power-bi-dashboards-with-external-access/): Identifies dashboards specifically shared externally which may contain aggregated sensitive information - [Power BI policy: Power BI Reports without Classification](https://docs.rencore.com/governance/reference/policies/powerbi/power-bi-reports-without-classification/): Identifies reports lacking required sensitivity classification to ensure data governance compliance - [Power BI policy: Power BI Workspaces with External Access](https://docs.rencore.com/governance/reference/policies/powerbi/power-bi-workspaces-with-external-access/): Identifies workspaces where external users have been granted access rights - [Power BI policy: Power BI Workspaces without Administrators](https://docs.rencore.com/governance/reference/policies/powerbi/power-bi-workspaces-without-administrators/): Identifies workspaces lacking designated administrative ownership, creating accountability risks - [SharePoint inventory](https://docs.rencore.com/governance/reference/inventory/sharepoint/): 14 object types Rencore Governance collects for SharePoint - [SharePoint: PnP Template](https://docs.rencore.com/governance/reference/inventory/sharepoint/pnptemplateentity/): PnP Templates are declarative way of describing artifacts that need to be deployed to a SharePoint Site Collection or Microsoft Teams team by using the PnP Provisioning engine - [SharePoint: SharePoint Group](https://docs.rencore.com/governance/reference/inventory/sharepoint/sharepointgroupentity/) - [SharePoint: SharePoint Agent](https://docs.rencore.com/governance/reference/inventory/sharepoint/spagententity/): SharePoint agents inside a list - [SharePoint: Deleted Site Collection](https://docs.rencore.com/governance/reference/inventory/sharepoint/spdeletedsiteentity/): All deleted SharePoint site collections - [SharePoint: File Sharing](https://docs.rencore.com/governance/reference/inventory/sharepoint/spfilesharinginformationentity/): All shared SharePoint files with their sharing information - [SharePoint: List/Library](https://docs.rencore.com/governance/reference/inventory/sharepoint/splistentity/): All SharePoint lists and libraries - [SharePoint: Locked Site Collection](https://docs.rencore.com/governance/reference/inventory/sharepoint/splockedsiteentity/): All locked SharePoint site collections - [SharePoint: Redirected Site Collection](https://docs.rencore.com/governance/reference/inventory/sharepoint/spredirectsiteentity/): All SharePoint Site Collections with renamed urls - [SharePoint: File](https://docs.rencore.com/governance/reference/inventory/sharepoint/spsearchfileentity/): All SharePoint files stored in a library of a SharePoint site - [SharePoint: Folder](https://docs.rencore.com/governance/reference/inventory/sharepoint/spsearchfolderentity/): All SharePoint folders stored in a library of a SharePoint site - [SharePoint: Site Collection](https://docs.rencore.com/governance/reference/inventory/sharepoint/spsiteentity/): All SharePoint site collections in your tenant - [SharePoint: SharePoint Site Template ](https://docs.rencore.com/governance/reference/inventory/sharepoint/spsitetemplateentity/): SharePoint Site Templates to be used in SharePoint Provisioning to determine the basic template if a SharePoint Site Collection - [SharePoint: SharePoint Special Group](https://docs.rencore.com/governance/reference/inventory/sharepoint/spspecialgroupentity/): This is a special group for SharePoint which is used to give access to content in SharePoint to special group of users - [SharePoint: Site](https://docs.rencore.com/governance/reference/inventory/sharepoint/spwebentity/): All root site and subsites of a SharePoint site collection - [Policies for SharePoint](https://docs.rencore.com/governance/reference/policies/sharepoint/): 32 built-in policies - [SharePoint policy: Unused Classic sites](https://docs.rencore.com/governance/reference/policies/sharepoint/unused-classic-sites/): Shows classic SharePoint sites - [SharePoint policy: SharePoint Extranet Sites](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-extranet-sites/): Sites without MS Teams where External Sharing is active - [SharePoint policy: SharePoint Libraries with disabled search](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-libraries-with-disabled-search/): Shows SharePoint Libraries where search has been disabled - [SharePoint policy: Sites with disabled search](https://docs.rencore.com/governance/reference/policies/sharepoint/sites-with-disabled-search/): Shows SharePoint Sites where search has been disabled - [SharePoint policy: Classic sites](https://docs.rencore.com/governance/reference/policies/sharepoint/classic-sites/): Shows classic SharePoint sites - [SharePoint policy: SharePoint file is shared with external users](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-file-is-shared-with-external-users/): Detects SharePoint files that have been shared externally, potentially exposing sensitive data. - [SharePoint policy: SharePoint site is inactive for more than 90 days](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-is-inactive-for-more-than-90-days/): Detects SharePoint sites without activity for a defined period, which could impact content accuracy. - [SharePoint policy: Site Collections with Subsites](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collections-with-subsites/): Shows all Site Collections that have more subsites than the root site - [SharePoint policy: SharePoint agent references more than two site collections](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-agent-references-more-than-two-site-collections/): Identifies SharePoint agents accessing data from more than two site collections, potentially leading to governance and accuracy issues. - [SharePoint policy: SharePoint agent uses outdated site collection](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-agent-uses-outdated-site-collection/): Identifies SharePoint agents linked to site collections that have not been modified in over a year, increasing response inaccuracy risks. - [SharePoint policy: SharePoint agent uses outdated list](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-agent-uses-outdated-list/): Detects SharePoint agents relying on lists that have not been updated in over a year, affecting AI accuracy. - [SharePoint policy: SharePoint file is older than 5 years](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-file-is-older-than-5-years/): Detects SharePoint files that have not been modified in over five years and may be outdated. - [SharePoint policy: Unused SharePoint files](https://docs.rencore.com/governance/reference/policies/sharepoint/unused-sharepoint-files/): Shows SharePoint files that are older than 5 years. - [SharePoint policy: SharePoint site collection lacks sensitivity label](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collection-lacks-sensitivity-label/): Detects SharePoint site collections missing sensitivity labels, increasing data security risks. - [SharePoint policy: SharePoint Site collections near storage limit](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collections-near-storage-limit/): Shows SharePoint Site Collections using more than 90% of their available storage space - [SharePoint policy: SharePoint site has broken permission inheritance](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-has-broken-permission-inheritance/): Detects SharePoint sites where permission inheritance is broken, increasing security risks. - [SharePoint policy: SharePoint site collections with disabled owners accounts](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collections-with-disabled-owners-accounts/): Shows SharePoint site collections that have any site owner account currently disabled - [SharePoint policy: SharePoint site collection is owned by external users](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collection-is-owned-by-external-users/): Identifies SharePoint site collections where external users are in ownership roles, increasing security risks. - [SharePoint policy: SharePoint site collections with less than 2 site owners](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collections-with-less-than-2-site-owners/): Shows SharePoint site collections that have less than 2 site owners - [SharePoint policy: SharePoint Site Collections without any owners](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collections-without-any-owners/): Shows SharePoint site collections that have no site owner - [SharePoint policy: SharePoint site collection contains more than 10 agents](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-site-collection-contains-more-than-10-agents/): Detects SharePoint site collections containing more than 10 Copilot agents, leading to management challenges and potential security risks. - [SharePoint policy: Site collection is unused with more than 1 GB](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collection-is-unused-with-more-than-1-gb/): Shows sites which have not been used in last 90 days and are larger than 1 GB - [SharePoint policy: Sites that have no Hubsite configured](https://docs.rencore.com/governance/reference/policies/sharepoint/sites-that-have-no-hubsite-configured/): Shows SharePoint sites, that have not been associated with a SharePoint hub site and thus might be not easily discovered - [SharePoint policy: SharePoint file is shared with inactive external user](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-file-is-shared-with-inactive-external-user/): Highlights SharePoint files shared with external users who have been inactive for over six months. - [SharePoint policy: SharePoint lists/libraries with more than 5000 items/documents](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-lists-libraries-with-more-than-5000-items-documents/): Shows SharePoint lists or libraries with more than 5000 items or documents - [SharePoint policy: Site Collection is near subsite limit](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collection-is-near-subsite-limit/): Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection - [SharePoint policy: Site Collection is near the List/Library limit](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collection-is-near-the-list-library-limit/): Shows Site Collections that have nearly reached the Subsite limit of 2000 List/Library limit per Site Collection - [SharePoint policy: Site Collections has reached the List/Library limit](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collections-has-reached-the-list-library-limit/): Shows Site Collections that have reached the Subsite limit of 2000 List/Library limit per Site Collection - [SharePoint policy: Site Collection has reached the subsite limit](https://docs.rencore.com/governance/reference/policies/sharepoint/site-collection-has-reached-the-subsite-limit/): Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection - [SharePoint policy: SharePoint subsite has unique permissions](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-subsite-has-unique-permissions/): Detects SharePoint subsites that have unique permissions, making security management complex. - [SharePoint policy: SharePoint agent references confidential site without approval](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-agent-references-confidential-site-without-approval/): Identifies SharePoint agents connected to confidential sites without approval, increasing the risk of unauthorized AI-generated responses. - [SharePoint policy: SharePoint agent is not approved](https://docs.rencore.com/governance/reference/policies/sharepoint/sharepoint-agent-is-not-approved/): Identifies SharePoint agents that have not been reviewed or approved before use, posing security risks. - [Automations for SharePoint](https://docs.rencore.com/governance/reference/automations/sharepoint/): 9 automation templates - [Built-in actions for SharePoint](https://docs.rencore.com/governance/reference/actions/sharepoint/): 19 built-in actions - [Teams inventory](https://docs.rencore.com/governance/reference/inventory/teams/): 10 object types Rencore Governance collects for Teams - [Teams: Deleted Team](https://docs.rencore.com/governance/reference/inventory/teams/deletedteamentity/): All teams that have been deleted - [Teams: Pre-defined Teams channels](https://docs.rencore.com/governance/reference/inventory/teams/predefinedteamschannelentity/): Predefined Teams channels that can automatically get deployed in team during provisioning (including custom tabs) - [Teams: Channel](https://docs.rencore.com/governance/reference/inventory/teams/teamschannelentity/): All Channels of the Team - [Teams: Team](https://docs.rencore.com/governance/reference/inventory/teams/teamsentity/): All teams in your tenant - [Teams: App](https://docs.rencore.com/governance/reference/inventory/teams/teamsinstalledappentity/): All installed Teams apps in your tenant - [Teams: Shared Channel External Member](https://docs.rencore.com/governance/reference/inventory/teams/teamssharedchannelexternalmemberentity/): Details about Shared Channel External Members - [Teams: Tab](https://docs.rencore.com/governance/reference/inventory/teams/teamstabentity/): All tabs of your teams in your tenant - [Teams: Usage](https://docs.rencore.com/governance/reference/inventory/teams/teamsusagereportentity/): Details about Teams usage in the last 180 days - [Teams: User Activity](https://docs.rencore.com/governance/reference/inventory/teams/teamsuseractivityreportentity/): Details about Teams user activity by user - [Teams: Device Usage](https://docs.rencore.com/governance/reference/inventory/teams/teamsuserdeviceusagereportentity/): Details about Teams device usage in the last 180 days - [Policies for Teams](https://docs.rencore.com/governance/reference/policies/teams/): 22 built-in policies - [Teams policy: Teams with a disabled owner account](https://docs.rencore.com/governance/reference/policies/teams/teams-with-a-disabled-owner-account/): Shows Teams that have at least one disabled owner account - [Teams policy: Teams with private channels](https://docs.rencore.com/governance/reference/policies/teams/teams-with-private-channels/): Shows Teams with private channels - [Teams policy: Teams with many channels](https://docs.rencore.com/governance/reference/policies/teams/teams-with-many-channels/): Shows Teams that have more than a certain number of channels (default 50) - [Teams policy: Teams that use forbidden/misleading words in display name](https://docs.rencore.com/governance/reference/policies/teams/teams-that-use-forbidden-misleading-words-in-display-name/): Shows Teams that use forbidden/misleading words in the team display name - [Teams policy: Teams with only disabled owner accounts](https://docs.rencore.com/governance/reference/policies/teams/teams-with-only-disabled-owner-accounts/): Shows Teams where all owners have disabled accounts - [Teams policy: Teams that reach the 200 channel limit](https://docs.rencore.com/governance/reference/policies/teams/teams-that-reach-the-200-channel-limit/): Shows Teams that have more than 180 channels - [Teams policy: Teams with very few owners](https://docs.rencore.com/governance/reference/policies/teams/teams-with-very-few-owners/): Shows Teams which have 1 or no owner - [Teams policy: Teams with very few users](https://docs.rencore.com/governance/reference/policies/teams/teams-with-very-few-users/): Shows Teams which has 1 or 2 users - [Teams policy: Teams with many users](https://docs.rencore.com/governance/reference/policies/teams/teams-with-many-users/): Shows Teams with a number of users that exceeds a threshold (default 50 users) - [Teams policy: Teams that reach the 100 owner limit](https://docs.rencore.com/governance/reference/policies/teams/teams-that-reach-the-100-owner-limit/): Shows Teams that have more than 80 owners - [Teams policy: Inactive teams](https://docs.rencore.com/governance/reference/policies/teams/inactive-teams/): Shows teams with no message posted in last 6 month and no SharePoint content modified in last 6 month - [Teams policy: Shared Channels with external access](https://docs.rencore.com/governance/reference/policies/teams/shared-channels-with-external-access/): All Shared Channels that have external user access - [Teams policy: Shared Channels without owners](https://docs.rencore.com/governance/reference/policies/teams/shared-channels-without-owners/): All Shared Channels that have no owners - [Teams policy: Teams with inactive external users](https://docs.rencore.com/governance/reference/policies/teams/teams-with-inactive-external-users/): Shows teams with external members that have not logged in for more than 6 month - [Teams policy: New Teams](https://docs.rencore.com/governance/reference/policies/teams/new-teams/): Teams created in the last 14 days, eg. to send onboarding information - [Teams policy: Public Teams](https://docs.rencore.com/governance/reference/policies/teams/public-teams/): Shows public teams - [Teams policy: Team contains Copilot agent and external members](https://docs.rencore.com/governance/reference/policies/teams/team-contains-copilot-agent-and-external-members/): Detects Team where a Copilot agent is installed and external users are present, posing security concerns. - [Teams policy: Teams with external users](https://docs.rencore.com/governance/reference/policies/teams/teams-with-external-users/): Shows all Teams that have external users/guests - [Teams policy: Teams with less than 2 owners](https://docs.rencore.com/governance/reference/policies/teams/teams-with-less-than-2-owners/): Shows Teams teams with less than 2 owners - [Teams policy: Teams with many owners](https://docs.rencore.com/governance/reference/policies/teams/teams-with-many-owners/): Shows Teams that have more than a certain number of owners (default 10) - [Teams policy: Teams without owners](https://docs.rencore.com/governance/reference/policies/teams/teams-without-owners/): Shows Teams teams without any owners - [Teams policy: Teams that use prohibited words in the name or description](https://docs.rencore.com/governance/reference/policies/teams/teams-that-use-prohibited-words-in-the-name-or-description/): Shows teams that use a list of prohibited words in the name or description - [Automations for Teams](https://docs.rencore.com/governance/reference/automations/teams/): 9 automation templates - [Built-in actions for Teams](https://docs.rencore.com/governance/reference/actions/teams/): 11 built-in actions - [Viva Engage inventory](https://docs.rencore.com/governance/reference/inventory/yammer/): 1 object type Rencore Governance collects for Viva Engage - [Viva Engage: Community](https://docs.rencore.com/governance/reference/inventory/yammer/yammergroupentity/): All Viva Engage communities in your tenant - [Policies for Viva Engage](https://docs.rencore.com/governance/reference/policies/yammer/): 1 built-in policies - [Viva Engage policy: Viva Engage Communities without members](https://docs.rencore.com/governance/reference/policies/yammer/viva-engage-communities-without-members/): Shows Viva Engage Communities that have no members - [Automations for Viva Engage](https://docs.rencore.com/governance/reference/automations/yammer/): 2 automation templates - [Built-in actions for Viva Engage](https://docs.rencore.com/governance/reference/actions/yammer/): 2 built-in actions - [Provisioning Templates](https://docs.rencore.com/governance/reference/provisioning-templates/): 14 out-of-the-box provisioning templates - [Teams provisioning template: Custom Team](https://docs.rencore.com/governance/reference/provisioning-templates/custom-team/): Start with an empty Team and configure policies, channels and apps from scratch - [Teams provisioning template: Department Workspace](https://docs.rencore.com/governance/reference/provisioning-templates/department-workspace/): Manage communication inside a department with a team for chat based communication and a SharePoint site for document collaboration. - [Teams provisioning template: Manage an Event](https://docs.rencore.com/governance/reference/provisioning-templates/manage-an-event/): Manage tasks, documents, and collaborate on everything you need to deliver a compelling event. - [Teams provisioning template: Organize Help Desk](https://docs.rencore.com/governance/reference/provisioning-templates/organize-help-desk/): Collaborate on documentation, policy, and processes that support your help desk. - [Teams provisioning template: Onboard Employees](https://docs.rencore.com/governance/reference/provisioning-templates/onboard-employees/): Improve your culture and streamline your employee onboarding with this central team for resources, questions, and a bit of fun. - [Teams provisioning template: Private Team](https://docs.rencore.com/governance/reference/provisioning-templates/private-team/): Use this template for internal collaboration with your colleagues, to discuss topics, share ideas and documents. - [Teams provisioning template: Product Development Workspace](https://docs.rencore.com/governance/reference/provisioning-templates/product-development-workspace/): Work together in product development, organize tasks, meeting notes and documents. - [Teams provisioning template: Manage a Project](https://docs.rencore.com/governance/reference/provisioning-templates/manage-a-project/): Manage tasks, share documents, conduct project meetings and document risks and decisions with this template for general project management. - [SharePoint provisioning template: Communication Site](https://docs.rencore.com/governance/reference/provisioning-templates/communication-site/): Share news, reports, status, and other information in a visually compelling format - [SharePoint provisioning template: Team Site](https://docs.rencore.com/governance/reference/provisioning-templates/team-site/): Store and collaborate on files or to create and manage lists of information. This template automatically creates an M365 group to manage Site Owners and Members - [SharePoint provisioning template: Team site (no Microsoft 365 group)](https://docs.rencore.com/governance/reference/provisioning-templates/team-site-no-microsoft-365-group/): Store and collaborate on files or to create and manage lists of information. This template does not create an M365 group to manage Site Owners and Members - [Microsoft 365 provisioning template: Private M365 Group](https://docs.rencore.com/governance/reference/provisioning-templates/private-m365-group/): Template for a private M365 group - [Planner provisioning template: Planner Board](https://docs.rencore.com/governance/reference/provisioning-templates/planner-board/): Template for a private Planner Plan - [Viva Engage provisioning template: Private Viva Engage Community](https://docs.rencore.com/governance/reference/provisioning-templates/private-viva-engage-community/): Create a private community around interests, fields of activity, departments and other topics. - [Reports](https://docs.rencore.com/governance/reference/reports/): Report templates, grouped by connector - [Reports for Entra ID](https://docs.rencore.com/governance/reference/reports/azuread/): 4 report templates - [Entra ID report: Conditional access sign-ins](https://docs.rencore.com/governance/reference/reports/azuread/conditional-access-sign-ins/): Shows Sign-Ins using conditional access - [Entra ID report: Failed sign-ins](https://docs.rencore.com/governance/reference/reports/azuread/failed-sign-ins/): Shows unsuccesfull sign-ins - [Entra ID report: MFA registered users](https://docs.rencore.com/governance/reference/reports/azuread/mfa-registered-users/): Shows all users with enabled multi factor authentication - [Entra ID report: Risky sign-ins](https://docs.rencore.com/governance/reference/reports/azuread/risky-sign-ins/): Shows Sign-Ins with Risk State "At Risk" - [Reports for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/reports/chatgpt/): 9 report templates - [ChatGPT Enterprise (Preview) report: ChatGPT agent spend this month](https://docs.rencore.com/governance/reference/reports/chatgpt/chatgpt-agent-spend-this-month/): Shows which workspace agents are spending money this month. Agent spend accrues without a person starting the run, so it is worth reading separately from user spend. - [ChatGPT Enterprise (Preview) report: Codex adoption by department](https://docs.rencore.com/governance/reference/reports/chatgpt/codex-adoption-by-department/): Shows Codex turns over the last 30 days rolled up to the Entra ID department, so adoption is read by team rather than by developer - [ChatGPT Enterprise (Preview) report: Codex usage per week](https://docs.rencore.com/governance/reference/reports/chatgpt/codex-usage-per-week/): Shows Codex turns per week over the last quarter - [ChatGPT Enterprise (Preview) report: Project data sources by connector type](https://docs.rencore.com/governance/reference/reports/chatgpt/project-data-sources-by-connector-type/): Shows how many files ChatGPT projects reach in each external system - the data-source map, read as a total rather than per project - [ChatGPT Enterprise (Preview) report: Custom GPT sharing exposure](https://docs.rencore.com/governance/reference/reports/chatgpt/custom-gpt-sharing-exposure/): Shows how many named users are reached by custom GPTs, grouped by sharing visibility. The bars on the public visibilities are the ones worth acting on. - [ChatGPT Enterprise (Preview) report: ChatGPT seat utilisation](https://docs.rencore.com/governance/reference/reports/chatgpt/chatgpt-seat-utilisation/): Shows how close users are to their effective spend cap, highest first - [ChatGPT Enterprise (Preview) report: ChatGPT spend by department](https://docs.rencore.com/governance/reference/reports/chatgpt/chatgpt-spend-by-department/): Shows ChatGPT spend over the last 30 days rolled up to the Entra ID department. This is the report the Microsoft 365 join exists for: cost attributed by organisational unit rather than by email address. - [ChatGPT Enterprise (Preview) report: ChatGPT spend by group](https://docs.rencore.com/governance/reference/reports/chatgpt/chatgpt-spend-by-group/): Shows ChatGPT spend over the last 30 days by ChatGPT group. Available without the Entra ID join, because the COSTS log carries group identity directly. - [ChatGPT Enterprise (Preview) report: ChatGPT spend per week](https://docs.rencore.com/governance/reference/reports/chatgpt/chatgpt-spend-per-week/): Shows ChatGPT dollar spend per week over the last quarter - [Reports for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/reports/claude/): 6 report templates - [Claude Enterprise (Preview) report: Connector adoption](https://docs.rencore.com/governance/reference/reports/claude/connector-adoption/): Shows which connectors are in use, by how many people and in which Claude products, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) report: Connector usage by user](https://docs.rencore.com/governance/reference/reports/claude/connector-usage-by-user/): Shows who uses which connector, measured in conversations and sessions, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) report: Claude spend by group](https://docs.rencore.com/governance/reference/reports/claude/claude-spend-by-group/): Shows which RBAC group the organization's Claude spend belongs to, broken down by product. Users who hold no group, or more than one, are reported without a group - the analytics rows cannot say which of several groups their spend belongs to - [Claude Enterprise (Preview) report: Plugin adoption](https://docs.rencore.com/governance/reference/reports/claude/plugin-adoption/): Shows which plugins are in use, by how many people and in which Claude product, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) report: Plugin usage by user](https://docs.rencore.com/governance/reference/reports/claude/plugin-usage-by-user/): Shows who invokes which plugin, from the Claude Console analytics of the Enterprise plan - [Claude Enterprise (Preview) report: Token consumption by group](https://docs.rencore.com/governance/reference/reports/claude/token-consumption-by-group/): Shows which RBAC group consumes the organization's Claude tokens, broken down by product. Users who hold no group, or more than one, are reported without a group - the analytics rows cannot say which of several groups their consumption belongs to - [Reports for Copilot](https://docs.rencore.com/governance/reference/reports/copilot/): 8 report templates - [Copilot report: Active Copilot license inventory](https://docs.rencore.com/governance/reference/reports/copilot/active-copilot-license-inventory/): Provides a current inventory of Copilot license assignments across all users - [Copilot report: Copilot sessions by department](https://docs.rencore.com/governance/reference/reports/copilot/copilot-sessions-by-department/): Analyze Copilot session occurrences across departments to steer training, adoption, or license allocation - [Copilot report: Copilot sessions by geographic region](https://docs.rencore.com/governance/reference/reports/copilot/copilot-sessions-by-geographic-region/): Analyzes Copilot session distribution across countries to support regional adoption strategies and compliance requirements - [Copilot report: Copilot usage by application](https://docs.rencore.com/governance/reference/reports/copilot/copilot-usage-by-application/): Displays Copilot interaction volume across Microsoft 365 applications, helping identify where users engage most with AI assistance - [Copilot report: Department Copilot cost analysis - monthly](https://docs.rencore.com/governance/reference/reports/copilot/department-copilot-cost-analysis-monthly/): Tracks monthly Copilot licensing costs by department i.e. for budget allocation or chargeback purposes - [Copilot report: Geographic region Copilot cost analysis - monthly](https://docs.rencore.com/governance/reference/reports/copilot/geographic-region-copilot-cost-analysis-monthly/): Tracks monthly Copilot licensing costs across countries i.e. for budget allocation or chargeback purposes - [Copilot report: Unassigned Copilot license pool](https://docs.rencore.com/governance/reference/reports/copilot/unassigned-copilot-license-pool/): Tracks unassigned Copilot licenses available for immediate deployment to maximize investment value - [Copilot report: Weekly Copilot chat activity](https://docs.rencore.com/governance/reference/reports/copilot/weekly-copilot-chat-activity/): Tracks weekly Copilot chat session trends to monitor adoption patterns and identify usage peaks - [Reports for Copilot Studio](https://docs.rencore.com/governance/reference/reports/copilotstudio/): 6 report templates - [Copilot Studio report: Agent creation by department - 90 days](https://docs.rencore.com/governance/reference/reports/copilotstudio/agent-creation-by-department-90-days/): Ranks departments by agent creation volume over 90 days to identify shadow IT risks and training needs - [Copilot Studio report: Copilot PAYG cost analysis - 30 days](https://docs.rencore.com/governance/reference/reports/copilotstudio/copilot-payg-cost-analysis-30-days/): Analyzes last 30 days pay-as-you-go costs by billing plan for budgeting - [Copilot Studio report: Copilot PAYG cost analysis - last month](https://docs.rencore.com/governance/reference/reports/copilotstudio/copilot-payg-cost-analysis-last-month/): Analyzes completed monthʼs pay-as-you-go costs by billing plan for budgeting - [Copilot Studio report: Current month Copilot PAYG costs by billing plan](https://docs.rencore.com/governance/reference/reports/copilotstudio/current-month-copilot-payg-costs-by-billing-plan/): Tracks current monthʼs pay-as-you-go costs across all Copilot billing plans to monitor spending - [Copilot Studio report: Weekly agent creation trend - 90 days](https://docs.rencore.com/governance/reference/reports/copilotstudio/weekly-agent-creation-trend-90-days/): Visualizes agent creation patterns over 90 days to identify growth trends and potential sprawl - [Copilot Studio report: Weekly agent usage analytics - 90 days](https://docs.rencore.com/governance/reference/reports/copilotstudio/weekly-agent-usage-analytics-90-days/): Tracks conversation volumes across all agents over 90 days to measure adoption and identify usage patterns - [Reports for Microsoft 365](https://docs.rencore.com/governance/reference/reports/office365groups/): 18 report templates - [Microsoft 365 report: Licenses with unused seats](https://docs.rencore.com/governance/reference/reports/office365groups/licenses-with-unused-seats/): Shows licenses which have a high number of unused seats - [Microsoft 365 report: License usage for Visio, Project and Power BI Pro](https://docs.rencore.com/governance/reference/reports/office365groups/license-usage-for-visio-project-and-power-bi-pro/): Shows units consumed for critical licenses like Visio, Project and Power BI Pro - [Microsoft 365 report: Licenses assigned to disabled user accounts](https://docs.rencore.com/governance/reference/reports/office365groups/licenses-assigned-to-disabled-user-accounts/): Shows licenses which are assigned to users with account enabled set to false - [Microsoft 365 report: Licenses assigned to external users](https://docs.rencore.com/governance/reference/reports/office365groups/licenses-assigned-to-external-users/): Shows licenses which are assigned to external users and could be removed or might unnecessary - [Microsoft 365 report: Licenses assigned to inactive users](https://docs.rencore.com/governance/reference/reports/office365groups/licenses-assigned-to-inactive-users/): Shows licenses which are users that have not signed in in last 90 days - [Microsoft 365 report: Suspended/disabled subscriptions](https://docs.rencore.com/governance/reference/reports/office365groups/suspended-disabled-subscriptions/): All subscriptions that are not enabled - [Microsoft 365 report: Distribution groups](https://docs.rencore.com/governance/reference/reports/office365groups/distribution-groups/): All active distribution groups - [Microsoft 365 report: External users](https://docs.rencore.com/governance/reference/reports/office365groups/external-users/): Shows all external users - [Microsoft 365 report: Groups with teams](https://docs.rencore.com/governance/reference/reports/office365groups/groups-with-teams/): All groups with Teams connected - [Microsoft 365 report: Internal users](https://docs.rencore.com/governance/reference/reports/office365groups/internal-users/): Shows all internal users - [Microsoft 365 report: Users to be licensed with Rencore Governance](https://docs.rencore.com/governance/reference/reports/office365groups/users-to-be-licensed-with-rencore-governance/): Used to calculate license costs for Rencore Governance - [Microsoft 365 report: Microsoft 365 groups](https://docs.rencore.com/governance/reference/reports/office365groups/microsoft-365-groups/): All active Microsoft 365 groups - [Microsoft 365 report: Private groups](https://docs.rencore.com/governance/reference/reports/office365groups/private-groups/): All private groups - [Microsoft 365 report: Public groups](https://docs.rencore.com/governance/reference/reports/office365groups/public-groups/): All public groups - [Microsoft 365 report: Security groups](https://docs.rencore.com/governance/reference/reports/office365groups/security-groups/): All active security groups - [Microsoft 365 report: Email domains of external users](https://docs.rencore.com/governance/reference/reports/office365groups/email-domains-of-external-users/): Shows the domains of external user emails to be able to configure allowed domains - [Microsoft 365 report: Users by region](https://docs.rencore.com/governance/reference/reports/office365groups/users-by-region/): Groups users by their country or region - [Microsoft 365 report: Users by type](https://docs.rencore.com/governance/reference/reports/office365groups/users-by-type/): Groups users by their type - [Reports for OneDrive](https://docs.rencore.com/governance/reference/reports/onedrive/): 1 report template - [OneDrive report: Microsoft Loop Teams components used by department](https://docs.rencore.com/governance/reference/reports/onedrive/microsoft-loop-teams-components-used-by-department/): All Loop components of users grouped by their department - [Reports for Power Automate](https://docs.rencore.com/governance/reference/reports/powerautomate/): 5 report templates - [Power Automate report: Flows by state](https://docs.rencore.com/governance/reference/reports/powerautomate/flows-by-state/): Shows count of Flows grouped by started or stopped state - [Power Automate report: Flows with 10 or more actions](https://docs.rencore.com/governance/reference/reports/powerautomate/flows-with-10-or-more-actions/): All complex flows - [Power Automate report: Flows with 3 or more connections](https://docs.rencore.com/governance/reference/reports/powerautomate/flows-with-3-or-more-connections/): All Flows that user combine many services - [Power Automate report: Flow runs in the last 30 days](https://docs.rencore.com/governance/reference/reports/powerautomate/flow-runs-in-the-last-30-days/): All Flow runs that occurred in the last 30 days - [Power Automate report: Stopped flows](https://docs.rencore.com/governance/reference/reports/powerautomate/stopped-flows/): All stopped Flows - [Reports for Power BI](https://docs.rencore.com/governance/reference/reports/powerbi/): 5 report templates - [Power BI report: Content consumption metrics](https://docs.rencore.com/governance/reference/reports/powerbi/content-consumption-metrics/): Report on usage patterns across users to identify valuable content and potential training needs - [Power BI report: High-traffic workspace analysis](https://docs.rencore.com/governance/reference/reports/powerbi/high-traffic-workspace-analysis/): Identifies workspaces with highest activity levels, helping prioritize governance focus - [Power BI report: Power user identification report](https://docs.rencore.com/governance/reference/reports/powerbi/power-user-identification-report/): Identifies top Power BI users who could be champions or may need additional governance oversight - [Power BI report: Resource utilization analysis](https://docs.rencore.com/governance/reference/reports/powerbi/resource-utilization-analysis/): Comprehensive view of unused artifacts by type to support cleanup initiatives and resource optimization - [Power BI report: Workspace distribution dashboard](https://docs.rencore.com/governance/reference/reports/powerbi/workspace-distribution-dashboard/): Visualizes all workspaces by type - [Reports for SharePoint](https://docs.rencore.com/governance/reference/reports/sharepoint/): 9 report templates - [SharePoint report: Unused SharePoint site collections with more than 1 GB](https://docs.rencore.com/governance/reference/reports/sharepoint/unused-sharepoint-site-collections-with-more-than-1-gb/): Shows sites which have not been used in last 90 days and are larger than 1 GB - [SharePoint report: Classic sites](https://docs.rencore.com/governance/reference/reports/sharepoint/classic-sites/): All Site Collections using classic site templates - [SharePoint report: Group sites](https://docs.rencore.com/governance/reference/reports/sharepoint/group-sites/): All sites that are connected to an Microsoft 365 Group - [SharePoint report: Large SharePoint lists](https://docs.rencore.com/governance/reference/reports/sharepoint/large-sharepoint-lists/): Large lists with many files can slow down scan duration and may require an add-on - [SharePoint report: Sites with external sharing enabled](https://docs.rencore.com/governance/reference/reports/sharepoint/sites-with-external-sharing-enabled/): All sites that have external sharing enabled - [SharePoint report: Sites with more than 50GB](https://docs.rencore.com/governance/reference/reports/sharepoint/sites-with-more-than-50gb/): All sites that host more than 50 GB of data - [SharePoint report: Sites without hub sites](https://docs.rencore.com/governance/reference/reports/sharepoint/sites-without-hub-sites/): All sites that do not have a hub site assigned - [SharePoint report: Total number of SharePoint files](https://docs.rencore.com/governance/reference/reports/sharepoint/total-number-of-sharepoint-files/): Total number of SharePoint Files - [SharePoint report: Unused sites](https://docs.rencore.com/governance/reference/reports/sharepoint/unused-sites/): Sites that haven't been used for more than 90 days - [Reports for Teams](https://docs.rencore.com/governance/reference/reports/teams/): 7 report templates - [Teams report: Archived teams](https://docs.rencore.com/governance/reference/reports/teams/archived-teams/): All Teams that have been archived - [Teams report: New teams](https://docs.rencore.com/governance/reference/reports/teams/new-teams/): All Teams scanned the first time in the last 14 days - [Teams report: Private channels](https://docs.rencore.com/governance/reference/reports/teams/private-channels/): All private channels in Teams - [Teams report: Private teams](https://docs.rencore.com/governance/reference/reports/teams/private-teams/): All Teams that are marked as private - [Teams report: Public teams](https://docs.rencore.com/governance/reference/reports/teams/public-teams/): All teams that are visible to everyone in the organization - [Teams report: Teams hosting shared channels](https://docs.rencore.com/governance/reference/reports/teams/teams-hosting-shared-channels/): All Teams that host 1 or more Shared Channels - [Teams report: Teams pre-scan](https://docs.rencore.com/governance/reference/reports/teams/teams-pre-scan/): Regular scans for a large amount of Teams may require dedicated database in Rencore Governance - [Segments](https://docs.rencore.com/governance/reference/segments/): Segments that come with each connector - [Segments for Entra ID](https://docs.rencore.com/governance/reference/segments/azuread/): 4 segments - [Entra ID segment: Conditional access sign-ins](https://docs.rencore.com/governance/reference/segments/azuread/conditional-access-sign-ins/): Shows Sign-Ins using conditional access - [Entra ID segment: Failed sign-ins](https://docs.rencore.com/governance/reference/segments/azuread/failed-sign-ins/): Shows unsuccesfull sign-ins - [Entra ID segment: MFA registered users](https://docs.rencore.com/governance/reference/segments/azuread/mfa-registered-users/): Shows all users with enabled multi factor authentication - [Entra ID segment: Risky sign-ins](https://docs.rencore.com/governance/reference/segments/azuread/risky-sign-ins/): Shows Sign-Ins with Risk State "At Risk" - [Segments for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/segments/chatgpt/): 50 segments - [ChatGPT Enterprise (Preview) segment: Admins](https://docs.rencore.com/governance/reference/segments/chatgpt/admins/): Users holding the workspace admin role - [ChatGPT Enterprise (Preview) segment: Published agents with connectors](https://docs.rencore.com/governance/reference/segments/chatgpt/published-agents-with-connectors/): Agents that are live and can reach an external system - [ChatGPT Enterprise (Preview) segment: Agents triggered without a human](https://docs.rencore.com/governance/reference/segments/chatgpt/agents-triggered-without-a-human/): Agents that ran from an API call, a webhook or a schedule in the last 30 days - [ChatGPT Enterprise (Preview) segment: Agents with spend](https://docs.rencore.com/governance/reference/segments/chatgpt/agents-with-spend/): Workspace agents that have incurred cost this month - [ChatGPT Enterprise (Preview) segment: Analytics viewers](https://docs.rencore.com/governance/reference/segments/chatgpt/analytics-viewers/): Users who can read workspace-wide usage figures without holding admin rights - [ChatGPT Enterprise (Preview) segment: Codex seat without Codex usage](https://docs.rencore.com/governance/reference/segments/chatgpt/codex-seat-without-codex-usage/): Users on a Codex seat with no Codex usage in the last 30 days - [ChatGPT Enterprise (Preview) segment: Codex seats](https://docs.rencore.com/governance/reference/segments/chatgpt/codex-seats/): Users holding a Codex seat - [ChatGPT Enterprise (Preview) segment: Credentials expiring within 30 days](https://docs.rencore.com/governance/reference/segments/chatgpt/credentials-expiring-within-30-days/): Service account credentials that lapse in the next 30 days - an outage waiting to happen - [ChatGPT Enterprise (Preview) segment: Disabled automations](https://docs.rencore.com/governance/reference/segments/chatgpt/disabled-automations/): Scheduled automations that are switched off and left in place - [ChatGPT Enterprise (Preview) segment: Disabled service accounts](https://docs.rencore.com/governance/reference/segments/chatgpt/disabled-service-accounts/): Service accounts that are switched off and left in place - [ChatGPT Enterprise (Preview) segment: Elevated invitations](https://docs.rencore.com/governance/reference/segments/chatgpt/elevated-invitations/): Pending invitations that would grant owner or admin rights on acceptance - [ChatGPT Enterprise (Preview) segment: Empty groups](https://docs.rencore.com/governance/reference/segments/chatgpt/empty-groups/): Groups with no members, which still grant whatever was shared with them - [ChatGPT Enterprise (Preview) segment: Codex environments with repository access](https://docs.rencore.com/governance/reference/segments/chatgpt/codex-environments-with-repository-access/): Codex sandboxes wired to at least one repository. To find the ones outside an approved list, maintain the allowed organisations as a custom property and compare against Repository Orgs - [ChatGPT Enterprise (Preview) segment: External data sources of projects](https://docs.rencore.com/governance/reference/segments/chatgpt/external-data-sources-of-projects/): Connector scopes through which a project pulls from Slack, Linear, Google Drive or a website - [ChatGPT Enterprise (Preview) segment: Invitations to external domains](https://docs.rencore.com/governance/reference/segments/chatgpt/invitations-to-external-domains/): Invitations to addresses that match no Entra ID user or match a guest. Needs the Microsoft 365 Users inventory; without it every invitation is listed - [ChatGPT Enterprise (Preview) segment: External users](https://docs.rencore.com/governance/reference/segments/chatgpt/external-users/): ChatGPT users whose Entra ID identity is a guest - [ChatGPT Enterprise (Preview) segment: Failed library indexing](https://docs.rencore.com/governance/reference/segments/chatgpt/failed-library-indexing/): Library files that failed to index and are silently unavailable to the person who uploaded them - [ChatGPT Enterprise (Preview) segment: Connector scopes with failed sync](https://docs.rencore.com/governance/reference/segments/chatgpt/connector-scopes-with-failed-sync/): External data sources that last failed to sync, so the project is answering from stale data - [ChatGPT Enterprise (Preview) segment: GPTs with custom actions](https://docs.rencore.com/governance/reference/segments/chatgpt/gpts-with-custom-actions/): Custom GPTs that call an external domain through a custom action - [ChatGPT Enterprise (Preview) segment: GPTs with an inactive owner](https://docs.rencore.com/governance/reference/segments/chatgpt/gpts-with-an-inactive-owner/): Custom GPTs whose owner is inactive or has left the workspace - orphan candidates for isolate, then delete - [ChatGPT Enterprise (Preview) segment: Groups without a default limit](https://docs.rencore.com/governance/reference/segments/chatgpt/groups-without-a-default-limit/): Groups with no default spend cap, so their members fall through to the workspace default - [ChatGPT Enterprise (Preview) segment: Idle Codex machines](https://docs.rencore.com/governance/reference/segments/chatgpt/idle-codex-machines/): Developer machines not seen for 30 days but still paired - [ChatGPT Enterprise (Preview) segment: Idle seats](https://docs.rencore.com/governance/reference/segments/chatgpt/idle-seats/): Users with no usage this month or last month - reclaim candidates - [ChatGPT Enterprise (Preview) segment: Inactive users still holding objects](https://docs.rencore.com/governance/reference/segments/chatgpt/inactive-users-still-holding-objects/): Inactive users who still own GPTs, projects, agents, Codex environments or library files - [ChatGPT Enterprise (Preview) segment: Users with an individual override](https://docs.rencore.com/governance/reference/segments/chatgpt/users-with-an-individual-override/): Users whose cap comes from a personal override rather than their group or the workspace default - [ChatGPT Enterprise (Preview) segment: Large library files](https://docs.rencore.com/governance/reference/segments/chatgpt/large-library-files/): Library files over 50 MB - [ChatGPT Enterprise (Preview) segment: Manual groups](https://docs.rencore.com/governance/reference/segments/chatgpt/manual-groups/): Groups maintained by hand rather than provisioned through SCIM - [ChatGPT Enterprise (Preview) segment: Manually managed users](https://docs.rencore.com/governance/reference/segments/chatgpt/manually-managed-users/): Users not provisioned through SCIM, so joiner-mover-leaver does not reach them - [ChatGPT Enterprise (Preview) segment: MCP and OpenAPI app links](https://docs.rencore.com/governance/reference/segments/chatgpt/mcp-and-openapi-app-links/): Live links from a member's ChatGPT account to an MCP server or an OpenAPI app - [ChatGPT Enterprise (Preview) segment: Non-SSO logins](https://docs.rencore.com/governance/reference/segments/chatgpt/non-sso-logins/): Users who signed in with a password rather than through SSO in the last 30 days - [ChatGPT Enterprise (Preview) segment: Owners](https://docs.rencore.com/governance/reference/segments/chatgpt/owners/): Users holding the workspace owner role - the only people who can grant the owner-only compliance scopes - [ChatGPT Enterprise (Preview) segment: Pending limit-increase requests](https://docs.rencore.com/governance/reference/segments/chatgpt/pending-limit-increase-requests/): Spend cap increase requests nobody has resolved - [ChatGPT Enterprise (Preview) segment: Plugins listed to the whole workspace](https://docs.rencore.com/governance/reference/segments/chatgpt/plugins-listed-to-the-whole-workspace/): Plugins any workspace member can find and install without being told about them - [ChatGPT Enterprise (Preview) segment: Plugins bundling MCP servers](https://docs.rencore.com/governance/reference/segments/chatgpt/plugins-bundling-mcp-servers/): Plugins that install an MCP server, and therefore an external endpoint the workspace talks to - [ChatGPT Enterprise (Preview) segment: Projects with connector scopes](https://docs.rencore.com/governance/reference/segments/chatgpt/projects-with-connector-scopes/): ChatGPT projects with at least one external data source attached - [ChatGPT Enterprise (Preview) segment: Projects with an inactive owner](https://docs.rencore.com/governance/reference/segments/chatgpt/projects-with-an-inactive-owner/): ChatGPT projects whose owner is inactive or has left the workspace - [ChatGPT Enterprise (Preview) segment: Publicly reachable GPTs](https://docs.rencore.com/governance/reference/segments/chatgpt/publicly-reachable-gpts/): Custom GPTs reachable outside the workspace, by link or through the GPT store - [ChatGPT Enterprise (Preview) segment: Publicly reachable or workspace-wide projects](https://docs.rencore.com/governance/reference/segments/chatgpt/publicly-reachable-or-workspace-wide-projects/): ChatGPT projects reachable outside the workspace or by every member - [ChatGPT Enterprise (Preview) segment: Shadow accounts](https://docs.rencore.com/governance/reference/segments/chatgpt/shadow-accounts/): ChatGPT users with no matching Entra ID identity - accounts outside the directory entirely. Needs the Microsoft 365 Users inventory; without it every user is listed - [ChatGPT Enterprise (Preview) segment: Shared Codex environments](https://docs.rencore.com/governance/reference/segments/chatgpt/shared-codex-environments/): Codex sandboxes reachable by somebody other than their creator - [ChatGPT Enterprise (Preview) segment: Stale GPTs](https://docs.rencore.com/governance/reference/segments/chatgpt/stale-gpts/): Custom GPTs whose configuration has not changed in 90 days. This also flags a GPT that is used daily but never edited, so confirm with the owner before acting on it - [ChatGPT Enterprise (Preview) segment: Stale invitations](https://docs.rencore.com/governance/reference/segments/chatgpt/stale-invitations/): Invitations still pending or expired more than 30 days after they were sent - [ChatGPT Enterprise (Preview) segment: Stale projects](https://docs.rencore.com/governance/reference/segments/chatgpt/stale-projects/): ChatGPT projects whose configuration has not changed in 90 days, with the same caveat as stale GPTs - [ChatGPT Enterprise (Preview) segment: System-created service accounts](https://docs.rencore.com/governance/reference/segments/chatgpt/system-created-service-accounts/): Service accounts created by the system rather than a person, so there is nobody obvious to ask about them - [ChatGPT Enterprise (Preview) segment: Temporary override active](https://docs.rencore.com/governance/reference/segments/chatgpt/temporary-override-active/): Users on a time-boxed cap increase that has not yet lapsed - [ChatGPT Enterprise (Preview) segment: Trashed library files](https://docs.rencore.com/governance/reference/segments/chatgpt/trashed-library-files/): Library files the user has trashed but which still consume storage - [ChatGPT Enterprise (Preview) segment: Unlimited users](https://docs.rencore.com/governance/reference/segments/chatgpt/unlimited-users/): Users with no spend cap in force - [ChatGPT Enterprise (Preview) segment: Unused Codex environments](https://docs.rencore.com/governance/reference/segments/chatgpt/unused-codex-environments/): Codex sandboxes no task has ever run in, which is standing repository access for nothing - [ChatGPT Enterprise (Preview) segment: Users over 80% of their cap](https://docs.rencore.com/governance/reference/segments/chatgpt/users-over-80-of-their-cap/): Users whose month-to-date usage has passed 80% of their effective spend cap - [ChatGPT Enterprise (Preview) segment: Workspace-wide GPTs](https://docs.rencore.com/governance/reference/segments/chatgpt/workspace-wide-gpts/): Custom GPTs every workspace member can reach without being named - [Segments for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/segments/claude/): 10 segments - [Claude Enterprise (Preview) segment: Claude admin users](https://docs.rencore.com/governance/reference/segments/claude/claude-admin-users/): Shows all users who are an admin, owner, primary owner or membership admin of at least one Claude organization - [Claude Enterprise (Preview) segment: Agent-owned remote sessions](https://docs.rencore.com/governance/reference/segments/claude/agent-owned-remote-sessions/): Shows remote sessions started by agents rather than users - [Claude Enterprise (Preview) segment: Claude billing users](https://docs.rencore.com/governance/reference/segments/claude/claude-billing-users/): Shows all users who hold the billing role in at least one Claude organization and can therefore see cost and usage - [Claude Enterprise (Preview) segment: Claude Code users](https://docs.rencore.com/governance/reference/segments/claude/claude-code-users/): Shows all users who hold the Claude Code user role in at least one Claude organization - [Claude Enterprise (Preview) segment: Claude developers](https://docs.rencore.com/governance/reference/segments/claude/claude-developers/): Shows all users who hold the developer role in at least one Claude organization - [Claude Enterprise (Preview) segment: External users](https://docs.rencore.com/governance/reference/segments/claude/external-users/): Shows users flagged as external in Entra ID - [Claude Enterprise (Preview) segment: Internal users](https://docs.rencore.com/governance/reference/segments/claude/internal-users/): Shows internal corporate users - [Claude Enterprise (Preview) segment: Publicly readable code artifacts](https://docs.rencore.com/governance/reference/segments/claude/publicly-readable-code-artifacts/): Shows Code artifacts readable by anyone on the internet - [Claude Enterprise (Preview) segment: Organization-wide projects](https://docs.rencore.com/governance/reference/segments/claude/organization-wide-projects/): Shows Claude projects that are not private and visible to every organization member - [Claude Enterprise (Preview) segment: Claude standard users](https://docs.rencore.com/governance/reference/segments/claude/claude-standard-users/): Shows all users who hold a non-admin membership in at least one Claude organization - [Segments for Copilot Studio](https://docs.rencore.com/governance/reference/segments/copilotstudio/): 10 segments - [Copilot Studio segment: Autonomous agents](https://docs.rencore.com/governance/reference/segments/copilotstudio/autonomous-agents/): Shows agents that have an external trigger like email or recurrance - [Copilot Studio segment: Conversations in Copilot Studio](https://docs.rencore.com/governance/reference/segments/copilotstudio/conversations-in-copilot-studio/): Identifies Agent conversation that happened inside Copilot Studio - [Copilot Studio segment: Conversations in M365 Copilot](https://docs.rencore.com/governance/reference/segments/copilotstudio/conversations-in-m365-copilot/): Identifies Agent conversation that happened inside M365 Copilot - [Copilot Studio segment: Conversations in Teams](https://docs.rencore.com/governance/reference/segments/copilotstudio/conversations-in-teams/): Identifies Agent conversation that happened inside Teams - [Copilot Studio segment: Dataverse knowledge](https://docs.rencore.com/governance/reference/segments/copilotstudio/dataverse-knowledge/): Knowledge using Dataverse as data source - [Copilot Studio segment: Files knowledge](https://docs.rencore.com/governance/reference/segments/copilotstudio/files-knowledge/): Knowledge using uploaded files as data source - [Copilot Studio segment: Public website knowledge](https://docs.rencore.com/governance/reference/segments/copilotstudio/public-website-knowledge/): Knowledge using public websites as data source - [Copilot Studio segment: Published Copilot agents](https://docs.rencore.com/governance/reference/segments/copilotstudio/published-copilot-agents/): List agents that are currently published - [Copilot Studio segment: Sharepoint and OneDrive knowledge](https://docs.rencore.com/governance/reference/segments/copilotstudio/sharepoint-and-onedrive-knowledge/): Knowledge using SharePoint or OneDrive as data source - [Copilot Studio segment: Users creating custom agents](https://docs.rencore.com/governance/reference/segments/copilotstudio/users-creating-custom-agents/): Unique users which are creating agents in last 30 days - [Segments for Exchange](https://docs.rencore.com/governance/reference/segments/exchange/): 2 segments - [Exchange segment: Shared mailboxes](https://docs.rencore.com/governance/reference/segments/exchange/shared-mailboxes/): Shows mailboxes shared by multiple users - [Exchange segment: User mailboxes](https://docs.rencore.com/governance/reference/segments/exchange/user-mailboxes/): Shows mailboxes owned by single users - [Segments for Microsoft 365](https://docs.rencore.com/governance/reference/segments/office365groups/): 13 segments - [Microsoft 365 segment: Microsoft 365 default](https://docs.rencore.com/governance/reference/segments/office365groups/microsoft-365-default/): Shows all the users which are an owner or member of any Microsoft 365 group. A filter of the Rencore Teams App - [Microsoft 365 segment: External users](https://docs.rencore.com/governance/reference/segments/office365groups/external-users/): Shows all external users - [Microsoft 365 segment: My ownership](https://docs.rencore.com/governance/reference/segments/office365groups/my-ownership/): Shows all the users which own any Microsoft 365 group. A filter of the Rencore Teams App - [Microsoft 365 segment: Internal users](https://docs.rencore.com/governance/reference/segments/office365groups/internal-users/): Shows all internal users - [Microsoft 365 segment: My membership](https://docs.rencore.com/governance/reference/segments/office365groups/my-membership/): Shows all the users which are a member of any Microsoft 365 group. A filter of the Rencore Teams App - [Microsoft 365 segment: Disabled accounts](https://docs.rencore.com/governance/reference/segments/office365groups/disabled-accounts/): Shows all disabled users - [Microsoft 365 segment: Suspended/disabled subscriptions](https://docs.rencore.com/governance/reference/segments/office365groups/suspended-disabled-subscriptions/): All subscriptions that are not enabled - [Microsoft 365 segment: Distribution groups](https://docs.rencore.com/governance/reference/segments/office365groups/distribution-groups/): All active distribution groups - [Microsoft 365 segment: Groups with teams](https://docs.rencore.com/governance/reference/segments/office365groups/groups-with-teams/): All groups with Teams connected - [Microsoft 365 segment: Microsoft 365 groups](https://docs.rencore.com/governance/reference/segments/office365groups/microsoft-365-groups/): All active Microsoft 365 groups - [Microsoft 365 segment: Private groups](https://docs.rencore.com/governance/reference/segments/office365groups/private-groups/): All private groups - [Microsoft 365 segment: Public groups](https://docs.rencore.com/governance/reference/segments/office365groups/public-groups/): All public groups - [Microsoft 365 segment: Security groups](https://docs.rencore.com/governance/reference/segments/office365groups/security-groups/): All active security groups - [Segments for OneDrive](https://docs.rencore.com/governance/reference/segments/onedrive/): 2 segments - [OneDrive segment: Expired OneDrive file sharings](https://docs.rencore.com/governance/reference/segments/onedrive/expired-onedrive-file-sharings/): Shows OneDrive File Sharings file sharings which have reached their expiration date - [OneDrive segment: Loop Teams components](https://docs.rencore.com/governance/reference/segments/onedrive/loop-teams-components/): All Loop components stored in Microsoft OneDrives - [Segments for Power Automate](https://docs.rencore.com/governance/reference/segments/powerautomate/): 4 segments - [Power Automate segment: Flows with 10 or more actions](https://docs.rencore.com/governance/reference/segments/powerautomate/flows-with-10-or-more-actions/): All complex flows - [Power Automate segment: Flows with 3 or more connections](https://docs.rencore.com/governance/reference/segments/powerautomate/flows-with-3-or-more-connections/): All Flows that user combine many services - [Power Automate segment: Flow runs in the last 30 days](https://docs.rencore.com/governance/reference/segments/powerautomate/flow-runs-in-the-last-30-days/): All Flow runs that occurred in the last 30 days - [Power Automate segment: Stopped flows](https://docs.rencore.com/governance/reference/segments/powerautomate/stopped-flows/): All stopped Flows - [Segments for Power BI](https://docs.rencore.com/governance/reference/segments/powerbi/): 3 segments - [Power BI segment: Group workspaces](https://docs.rencore.com/governance/reference/segments/powerbi/group-workspaces/): V1 version of shared workspace (will be deprecated after migration to latest version of shared workspace) - [Power BI segment: Personal workspaces](https://docs.rencore.com/governance/reference/segments/powerbi/personal-workspaces/): Shows personal workspaces which are special type of workspace - [Power BI segment: Shared workspaces](https://docs.rencore.com/governance/reference/segments/powerbi/shared-workspaces/): Shows shared workspaces or simple workspaces used to share content with other users in the organization - [Segments for SharePoint](https://docs.rencore.com/governance/reference/segments/sharepoint/): 14 segments - [SharePoint segment: Sharepoint default](https://docs.rencore.com/governance/reference/segments/sharepoint/sharepoint-default/): Every User that has any SharePoint Site Collection Members or any SharePoint Site Collection Owners - [SharePoint segment: My ownership](https://docs.rencore.com/governance/reference/segments/sharepoint/my-ownership/): Every User that has any SharePoint Site Collection Owners - [SharePoint segment: My membership](https://docs.rencore.com/governance/reference/segments/sharepoint/my-membership/): Every User that has any SharePoint Site Collection Members - [SharePoint segment: External access](https://docs.rencore.com/governance/reference/segments/sharepoint/external-access/): Every User that has SharePoint Site Collection Owners - [SharePoint segment: Approved SharePoint agents](https://docs.rencore.com/governance/reference/segments/sharepoint/approved-sharepoint-agents/): Identifies SharePoint agents which have been approved - [SharePoint segment: Classic sites](https://docs.rencore.com/governance/reference/segments/sharepoint/classic-sites/): All Site Collections using classic site templates - [SharePoint segment: Expired SharePoint file sharings](https://docs.rencore.com/governance/reference/segments/sharepoint/expired-sharepoint-file-sharings/): Shows SharePoint File Sharings file sharings which have reached their expiration date - [SharePoint segment: Group sites](https://docs.rencore.com/governance/reference/segments/sharepoint/group-sites/): All sites that are connected to an Microsoft 365 Group - [SharePoint segment: Sites with external sharing enabled](https://docs.rencore.com/governance/reference/segments/sharepoint/sites-with-external-sharing-enabled/): All sites that have external sharing enabled - [SharePoint segment: Sites with more than 50GB](https://docs.rencore.com/governance/reference/segments/sharepoint/sites-with-more-than-50gb/): All sites that host more than 50 GB of data - [SharePoint segment: Sites without hub sites](https://docs.rencore.com/governance/reference/segments/sharepoint/sites-without-hub-sites/): All sites that do not have a hub site assigned - [SharePoint segment: Site with SharePoint agents](https://docs.rencore.com/governance/reference/segments/sharepoint/site-with-sharepoint-agents/): Identifies SharePoint site collections which contain SharePoint agents - [SharePoint segment: Unapproved SharePoint agents](https://docs.rencore.com/governance/reference/segments/sharepoint/unapproved-sharepoint-agents/): Identifies SharePoint agents which have not been approved - [SharePoint segment: Unused sites](https://docs.rencore.com/governance/reference/segments/sharepoint/unused-sites/): Sites that haven't been used for more than 90 days - [Segments for Teams](https://docs.rencore.com/governance/reference/segments/teams/): 14 segments - [Teams segment: Teams default](https://docs.rencore.com/governance/reference/segments/teams/teams-default/): Shows all the users which have any Team Member or Team Owner. A filter of the Rencore Teams App - [Teams segment: My ownership](https://docs.rencore.com/governance/reference/segments/teams/my-ownership/): Shows all the users which have any Team Owner. A filter of the Rencore Teams App - [Teams segment: My membership](https://docs.rencore.com/governance/reference/segments/teams/my-membership/): Shows all the users which have any Team Member. A filter of the Rencore Teams App - [Teams segment: Agents published to Teams app catalog](https://docs.rencore.com/governance/reference/segments/teams/agents-published-to-teams-app-catalog/): Shows all Copilot agents and SharePoint agents which are - [Teams segment: Archived teams](https://docs.rencore.com/governance/reference/segments/teams/archived-teams/): All Teams that have been archived - [Teams segment: Channels with Copilot agents](https://docs.rencore.com/governance/reference/segments/teams/channels-with-copilot-agents/): Identifies Team channels with a Copilot Agent conversation in the last 90 days - [Teams segment: New teams](https://docs.rencore.com/governance/reference/segments/teams/new-teams/): All Teams scanned the first time in the last 14 days - [Teams segment: Organization apps](https://docs.rencore.com/governance/reference/segments/teams/organization-apps/): Shows the (custom developed) apps available only in this tenant - [Teams segment: Private channels](https://docs.rencore.com/governance/reference/segments/teams/private-channels/): All private channels in Teams - [Teams segment: Private teams](https://docs.rencore.com/governance/reference/segments/teams/private-teams/): All Teams that are marked as private - [Teams segment: Public teams](https://docs.rencore.com/governance/reference/segments/teams/public-teams/): All teams that are visible to everyone in the organization - [Teams segment: Shared channels](https://docs.rencore.com/governance/reference/segments/teams/shared-channels/): Shows channels that are shared - [Teams segment: Store apps](https://docs.rencore.com/governance/reference/segments/teams/store-apps/): Shows the apps available to all tenants through the Microsoft Teams app store - [Teams segment: Teams with agents](https://docs.rencore.com/governance/reference/segments/teams/teams-with-agents/): Identifies Teams which had a Copilot agent conversation in the last 90 days - [Segments for Viva Engage](https://docs.rencore.com/governance/reference/segments/yammer/): 3 segments - [Viva Engage segment: Viva Engage default](https://docs.rencore.com/governance/reference/segments/yammer/viva-engage-default/): Shows all the users which have any Viva Engage community ownership or membership. A filter of the Rencore Teams App - [Viva Engage segment: My ownership](https://docs.rencore.com/governance/reference/segments/yammer/my-ownership/): Shows all the users which have any Viva Engage community ownership. A filter of the Rencore Teams App - [Viva Engage segment: My membership](https://docs.rencore.com/governance/reference/segments/yammer/my-membership/): Shows all the users which are members of any Viva Engage community but not owners. A filter of the Rencore Teams App - [Review templates](https://docs.rencore.com/governance/reference/review-templates/): 4 review templates - [Microsoft 365 review template: Access review for groups](https://docs.rencore.com/governance/reference/review-templates/access-review-for-groups/): Every Group - [SharePoint review template: Access review for site collections](https://docs.rencore.com/governance/reference/review-templates/access-review-for-site-collections/): Every Site Collection - [Teams review template: Access review for teams](https://docs.rencore.com/governance/reference/review-templates/access-review-for-teams/): Every Team - [Viva Engage review template: Access review for communities](https://docs.rencore.com/governance/reference/review-templates/access-review-for-communities/): Every Community - [Role: Admin](https://docs.rencore.com/governance/reference/roles/admin/) - [Role: Contributor](https://docs.rencore.com/governance/reference/roles/contributor/) - [Role: Owner](https://docs.rencore.com/governance/reference/roles/owner/) - [Role: Reader](https://docs.rencore.com/governance/reference/roles/reader/) - [Team: AllServices](https://docs.rencore.com/governance/reference/teams/allservices/) - [Team: Azure](https://docs.rencore.com/governance/reference/teams/azure/) - [Team: AzureAD](https://docs.rencore.com/governance/reference/teams/azuread/) - [Team: AzureAIFoundry (Preview)](https://docs.rencore.com/governance/reference/teams/azureaifoundry/) - [Team: ChatGPT (Preview)](https://docs.rencore.com/governance/reference/teams/chatgpt/) - [Team: Claude (Preview)](https://docs.rencore.com/governance/reference/teams/claude/) - [Team: Copilot](https://docs.rencore.com/governance/reference/teams/copilot/) - [Team: CopilotStudio](https://docs.rencore.com/governance/reference/teams/copilotstudio/) - [Team: Exchange](https://docs.rencore.com/governance/reference/teams/exchange/) - [Team: Office365Groups](https://docs.rencore.com/governance/reference/teams/office365groups/) - [Team: OneDrive](https://docs.rencore.com/governance/reference/teams/onedrive/) - [Team: Planner](https://docs.rencore.com/governance/reference/teams/planner/) - [Team: PowerApps](https://docs.rencore.com/governance/reference/teams/powerapps/) - [Team: PowerAutomate](https://docs.rencore.com/governance/reference/teams/powerautomate/) - [Team: PowerBI](https://docs.rencore.com/governance/reference/teams/powerbi/) - [Team: SharePoint](https://docs.rencore.com/governance/reference/teams/sharepoint/) - [Team: Teams](https://docs.rencore.com/governance/reference/teams/teams/) - [Team: Yammer](https://docs.rencore.com/governance/reference/teams/yammer/) - [Microsoft permissions](https://docs.rencore.com/governance/reference/permissions/): Permissions requested per authenticator - [Microsoft permissions: Auditing](https://docs.rencore.com/governance/reference/permissions/auditing/): 6 permissions - [Microsoft permissions: Entra ID](https://docs.rencore.com/governance/reference/permissions/entra-id/): 1 permissions - [Microsoft permissions: Azure](https://docs.rencore.com/governance/reference/permissions/azure/): 1 permissions - [Microsoft permissions: ChatGPT](https://docs.rencore.com/governance/reference/permissions/chatgpt/): 14 permissions - [Microsoft permissions: Claude](https://docs.rencore.com/governance/reference/permissions/claude/): 3 permissions - [Microsoft permissions: Copilot](https://docs.rencore.com/governance/reference/permissions/copilot/): 4 permissions - [Microsoft permissions: Dataverse](https://docs.rencore.com/governance/reference/permissions/dataverse/): 8 permissions - [Microsoft permissions: Exchange](https://docs.rencore.com/governance/reference/permissions/exchange/): 2 permissions - [Microsoft permissions: Microsoft 365 All services](https://docs.rencore.com/governance/reference/permissions/microsoft-365-all-services/): 21 permissions - [Microsoft permissions: Microsoft 365](https://docs.rencore.com/governance/reference/permissions/microsoft-365/): 6 permissions - [Microsoft permissions: OneDrive](https://docs.rencore.com/governance/reference/permissions/onedrive/): 3 permissions - [Microsoft permissions: OneDrive Permissions](https://docs.rencore.com/governance/reference/permissions/onedrive-permissions/): 1 permissions - [Microsoft permissions: Planner](https://docs.rencore.com/governance/reference/permissions/planner/): 1 permissions - [Microsoft permissions: Power Platform](https://docs.rencore.com/governance/reference/permissions/power-platform/): 2 permissions - [Microsoft permissions: Power BI](https://docs.rencore.com/governance/reference/permissions/power-bi/): 1 permissions - [Microsoft permissions: Security and Compliance](https://docs.rencore.com/governance/reference/permissions/security-and-compliance/): 1 permissions - [Microsoft permissions: Service Health](https://docs.rencore.com/governance/reference/permissions/service-health/): 1 permissions - [Microsoft permissions: SharePoint](https://docs.rencore.com/governance/reference/permissions/sharepoint/): 1 permissions - [Microsoft permissions: SharePoint Permissions](https://docs.rencore.com/governance/reference/permissions/sharepoint-permissions/): 1 permissions - [Microsoft permissions: Teams](https://docs.rencore.com/governance/reference/permissions/teams/): 6 permissions - [Microsoft permissions: Viva Engage](https://docs.rencore.com/governance/reference/permissions/viva-engage/): 3 permissions - [User permissions](https://docs.rencore.com/governance/reference/user-permissions/): Every user permission, by product area, with the built-in roles that include it - [Audit log](https://docs.rencore.com/governance/reference/audit-log/): All audit log events, one page per product area - [Audit log: Access Reviews](https://docs.rencore.com/governance/reference/audit-log/access-reviews/): 17 events - [Audit log: Audit Log](https://docs.rencore.com/governance/reference/audit-log/audit-log/): 3 events - [Audit log: Automation](https://docs.rencore.com/governance/reference/audit-log/automation/): 21 events - [Audit log: Consent](https://docs.rencore.com/governance/reference/audit-log/consent/): 5 events - [Audit log: Dashboards](https://docs.rencore.com/governance/reference/audit-log/dashboards/): 9 events - [Audit log: Email](https://docs.rencore.com/governance/reference/audit-log/email/): 1 events - [Audit log: Environments](https://docs.rencore.com/governance/reference/audit-log/environments/): 17 events - [Audit log: Inventory](https://docs.rencore.com/governance/reference/audit-log/inventory/): 20 events - [Audit log: Jobs](https://docs.rencore.com/governance/reference/audit-log/jobs/): 18 events - [Audit log: Policies](https://docs.rencore.com/governance/reference/audit-log/policies/): 8 events - [Audit log: Provisioning](https://docs.rencore.com/governance/reference/audit-log/provisioning/): 3 events - [Audit log: Report](https://docs.rencore.com/governance/reference/audit-log/report/): 7 events - [Audit log: Review](https://docs.rencore.com/governance/reference/audit-log/review/): 30 events - [Audit log: Roles](https://docs.rencore.com/governance/reference/audit-log/roles/): 4 events - [Audit log: Settings](https://docs.rencore.com/governance/reference/audit-log/settings/): 54 events - [Audit log: Teams](https://docs.rencore.com/governance/reference/audit-log/teams/): 4 events - [Audit log: Users](https://docs.rencore.com/governance/reference/audit-log/users/): 10 events - [Audit log: Workspaces](https://docs.rencore.com/governance/reference/audit-log/workspaces/): 28 events - [Automation Actions](https://docs.rencore.com/governance/reference/automation-actions/): All actions automations can run, grouped by service - [Automation actions for ChatGPT Enterprise (Preview)](https://docs.rencore.com/governance/reference/automation-actions/chatgpt/): 9 automation actions - [Automation actions for Claude Enterprise (Preview)](https://docs.rencore.com/governance/reference/automation-actions/claude/): 1 automation actions - [Automation actions for Copilot Studio](https://docs.rencore.com/governance/reference/automation-actions/copilotstudio/): 4 automation actions - [Automation actions for Microsoft 365](https://docs.rencore.com/governance/reference/automation-actions/office365groups/): 50 automation actions - [Automation actions for OneDrive](https://docs.rencore.com/governance/reference/automation-actions/onedrive/): 2 automation actions - [Automation actions for Planner](https://docs.rencore.com/governance/reference/automation-actions/planner/): 1 automation actions - [Automation actions for Power Apps](https://docs.rencore.com/governance/reference/automation-actions/powerapps/): 4 automation actions - [Automation actions for Power Automate](https://docs.rencore.com/governance/reference/automation-actions/powerautomate/): 2 automation actions - [Automation actions for Power BI](https://docs.rencore.com/governance/reference/automation-actions/powerbi/): 2 automation actions - [Automation actions for SharePoint](https://docs.rencore.com/governance/reference/automation-actions/sharepoint/): 41 automation actions - [Automation actions for Teams](https://docs.rencore.com/governance/reference/automation-actions/teams/): 15 automation actions - [Automation actions for Viva Engage](https://docs.rencore.com/governance/reference/automation-actions/yammer/): 4 automation actions - [General automation actions](https://docs.rencore.com/governance/reference/automation-actions/general/): 7 service-independent actions ### Release notes - [Rencore Governance release notes](https://releases.rencore.com/): Release notes for every version