Enterprise Review for Microsoft 365
See everything in your Microsoft 365 tenant, in one place
Users, mailboxes, devices, groups, licences and enterprise apps — gathered into one filterable view and refreshed every day. Read-only, and it runs inside your own Azure subscription.
Seven reports, one picture of your tenant
Every report is a fast, filterable table you can sort, search, share as a link and export to CSV — with a detail page behind every user, device, group, licence and app.
User overview
Every user alongside their mailbox, with counts of the licences, groups, apps and devices they hold — one row per person.
Users
Enabled and disabled accounts, cloud-only or synced from on-premises, department, job title, manager, last sign-in and MFA status.
Mailboxes
Exchange Online user, shared, room and equipment mailboxes, with mailbox size and when each one last received email.
Devices
Entra-registered devices with operating system, owner and last activity — plus compliance state, enrolment, last sync and installed apps for Intune-managed devices.
Groups
Security, Microsoft 365, distribution and mail-enabled groups — dynamic or assigned — with member counts and how many of those members are disabled.
Licences
Every licence type with purchased versus consumed units, its subscription status, and how many are held by active versus disabled users.
Enterprise apps
Enterprise applications with publisher, sign-in audience and status, and which users and groups are assigned to each — directly or through a group.
Spot waste and risk at a glance
Enterprise Review doesn't change anything in your tenant. It shows you what's there, clearly enough that your team can act on it.
- Licences still assigned to disabled accounts
- Accounts that haven't signed in for months
- Users without MFA enabled
- Managed devices that are out of compliance
- Groups that still contain disabled members
- Shared mailboxes that no longer receive mail
- Apps assigned more widely than anyone intended
- Licence types where you're paying for unused units
Safe by design
Built for the people who are accountable for the tenant — and for the auditors who ask them questions.
Read-only by design
It reads your tenant through Microsoft Graph with read-only permissions approved by your Global Administrator. It cannot create, change or delete anything.
Runs in your Azure
Enterprise Review is deployed into your own Azure subscription, so the data it collects stays in your environment — not ours.
Your sign-in, your access
Your team signs in with their existing Microsoft work accounts. Only administrators can trigger a data refresh.
Refreshed daily, with history
Data refreshes automatically every day, or on demand, and every refresh run is kept for audit purposes.
How it's delivered
We deploy Enterprise Review into your Azure subscription and support it from there. Your IT team owns the day-to-day.
We deploy it
We install and configure Enterprise Review in your Azure subscription.
You approve read-only access
Your Global Administrator grants the read-only Microsoft Graph permissions it needs — nothing more.
Your team uses it daily
Your IT team signs in with their Microsoft accounts and works from data that refreshes every day.
We support it
We keep it updated and help your team get the most out of it.
Want a hand acting on what you find? Our cloud and managed IT teams can help.
Microsoft, Microsoft 365, Microsoft Entra, Azure, Exchange Online and Intune are trademarks of the Microsoft group of companies. Onborda Enterprise Review is an independent product and is not affiliated with, sponsored by or endorsed by Microsoft.
See your tenant clearly
Book a walkthrough of Enterprise Review with our team. We'll show you the reports and talk through what deployment into your Azure looks like.