Reports

53 reports, for one client or across all 3. Search, or pick the job you're doing.

What nobody uses any more: stale accounts, apps unused for months that still hold permissions, empty and nested groups, managers who have left, and what's in the recycle bin.

Identity and access3

All users Every account with its department, job title, manager, licences and last sign-in, its managers and departments, and accounts reporting to a blocked manager.

Inactive accounts Members and guests who haven't signed in for a long time, and old invitations.

Deleted users and groups Users, teams and Microsoft 365 groups in the recycle bin, with the licences they held and the days left to restore each before Microsoft deletes it for good after 30 days.

Files and Teams1

Empty, nested and dynamic groups Groups with no members, groups inside other groups, dynamic groups with their rules and whether they're paused, teams and groups about to expire, role-assignable groups, and blocked accounts still in groups.

Devices and apps3

Devices Intune compliance, encryption and Windows support, BitLocker recovery keys saved in Entra ID, and every Entra ID device record.

Apps and consents Third-party apps with access to the tenant, and app credential expiry.

Unused apps Every app from outside Microsoft with when it last signed in, and those unused for 90 days that still hold permissions.

Each report opens across all your clients, one row per client. Pick a client above to open its own reports.

Reports

Identity and access3

Files and Teams1

Devices and apps3

Clients