Contoso Ltd

187 external guest users currently have access to your environment. 43 guests accessed resources in the last 30 days.

External users accessing internal resources increases data leakage risk.

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
…and 182 more

28 item(s) shared via anonymous edit links — anyone with the link can modify these files without signing in.

Anyone with the link can modify your company data — high risk if links are forwarded or leaked.

Q3 Budget Final.xlsx — https://contoso.sharepoint.com/sites/Finance/Shared Documents/Q3 Budget Final.xlsx
Project Roadmap 2025.pptx — https://contoso.sharepoint.com/sites/Engineering/Shared Documents/Project Roadmap 2025.pptx
Board Presentation Draft.pptx — https://contoso.sharepoint.com/sites/Executive/Shared Documents/Board Presentation Draft.pptx
HR Policy Updates.docx — https://contoso.sharepoint.com/sites/HR/Shared Documents/HR Policy Updates.docx
Client Proposal v3.docx — https://contoso.sharepoint.com/sites/Sales/Shared Documents/Client Proposal v3.docx
…and 23 more

156 item(s) shared via anonymous view links — anyone with the link can view these files without signing in.

Company data is accessible to anyone with a link, even outside your organization.

Company Overview.pptx — https://contoso.sharepoint.com/sites/Marketing/Shared Documents/Company Overview.pptx
Product Catalog 2025.pdf — https://contoso.sharepoint.com/sites/Marketing/Shared Documents/Product Catalog 2025.pdf
Press Release Jan 2025.docx — https://contoso.sharepoint.com/sites/Marketing/Shared Documents/Press Release Jan 2025.docx
Event Photos.zip — https://contoso.sharepoint.com/sites/Marketing/Shared Documents/Event Photos.zip
Marketing Brief.docx — https://contoso.sharepoint.com/sites/Marketing/Shared Documents/Marketing Brief.docx
…and 151 more

12 groups contain external guest members.

External users in internal groups can access shared files and conversations.

Partner Advisory Board
Acme Corp Project Team
Northwind Integration
Fabrikam Collaboration
Q4 Launch Team
…and 7 more

94 item(s) shared with the entire organization. Verify these are intentional.

Sensitive content may be visible to every employee, regardless of need-to-know.

All Hands Meeting Notes.docx — https://contoso.sharepoint.com/sites/IT/Shared Documents/All Hands Meeting Notes.docx
Employee Handbook 2025.pdf — https://contoso.sharepoint.com/sites/HR/Shared Documents/Employee Handbook 2025.pdf
IT Support Guide.docx — https://contoso.sharepoint.com/sites/IT/Shared Documents/IT Support Guide.docx
Benefits Overview.pdf — https://contoso.sharepoint.com/sites/HR/Shared Documents/Benefits Overview.pdf
Parking & Facilities Map.pdf — https://contoso.sharepoint.com/sites/IT/Shared Documents/Parking & Facilities Map.pdf
…and 89 more

37 item(s) across 5 site(s) have direct permissions granted to Everyone, Everyone except external users, or All Users: Marketing Team, Finance Portal, HR Documents, IT Support, Engineering Wiki.

Broad access groups can expose data to the entire organization unintentionally.

62 guest user(s) have not signed in for 90+ days or are disabled, but still have access to your environment.

Former partners or vendors may still have access to your internal resources.

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
…and 57 more

41 deleted or disabled Entra account(s) still present across 12 site(s).

Former users still referenced in permissions create audit and compliance gaps.

alex.morgan_contoso.com#ext#@fabrikam.onmicrosoft.com
james.wilson_northwind.com#ext#@fabrikam.onmicrosoft.com
linda.chen_tailspin.com#ext#@fabrikam.onmicrosoft.com
robert.davis_woodgrove.com#ext#@fabrikam.onmicrosoft.com
sarah.kim_adventure-works.com#ext#@fabrikam.onmicrosoft.com
…and 36 more

8 groups have no active owner (includes groups where all owners are disabled in Entra ID).

No one is accountable for these resources — policy violations go unnoticed.

FY2023 Budget Planning
Legacy Migration Project
Q2 Campaign Team
Contoso Intranet Redesign
IT Security Workgroup
…and 3 more

Limitation: Checked 100 of 482 groups. Full coverage requires Syskit Point.

31 groups have a single active owner. If that person leaves or is unavailable, no one can manage the group. Microsoft recommends at least 2 owners per group.

If the sole owner leaves or is unavailable, the group becomes unmanageable — a business continuity risk.

Sales EMEA Team
Product Feedback Tracker
Executive Briefing Center
Onboarding 2025
Customer Advisory Board
…and 26 more

Limitation: Checked 100 of 482 groups. Full coverage requires Syskit Point.

67 users haven't signed in for over 90 days but still have active accounts.

Inactive accounts with active access are a common vector for unauthorized entry.

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
…and 62 more

You have 8 Global Admins. Microsoft recommends 2-4 to minimize attack surface.

Each admin account is a high-value target — more admins means a larger attack surface.

34 users hold admin roles across the tenant, including Exchange Admin, SharePoint Admin, and Teams Admin.

Excessive privileged access increases risk of accidental or malicious changes.

2,880 total licenses (2,480 paid, 400 free). 312 paid licenses are unassigned. Estimated waste: ~$221,760/year.

Budget is being spent on licenses that deliver no value to the organization.

Only 62% of purchased paid licenses are assigned.

Budget is being spent on licenses that deliver no value to the organization.

86 users have redundant license pairs across 3 combination(s). Potential savings: ~$23,040/year.

Overlapping licenses mean you're paying twice for the same capabilities.

5 premium add-on(s) with unassigned or unused licenses. Potential savings: ~$25,140/year.

Add-on spend with no usage is direct budget waste.

6 sites are above 80% storage capacity.

Sites running out of space can disrupt collaboration and block users from saving work.

Legal Contracts — 90% full (45.1 GB of 50 GB)
Product Design — 87% full (38.7 GB of 50 GB)
Marketing Team — 85% full (85.2 GB of 100 GB)
Finance Portal — 84% full (63.1 GB of 75 GB)
Engineering Wiki — 83% full (83.0 GB of 100 GB)
IT Support — 81% full (16.2 GB of 20 GB)

Tenant storage grew by 48.2 GB (12.3%) over the last 180 days.

Unchecked storage growth leads to unexpected costs and eventual capacity issues.

8 site(s) with no activity in the last 12 months are using 124.5 GB of storage. Moving them to Microsoft 365 Archive (75% cheaper storage) could save ~$1,794/year.

Archiving inactive sites cuts storage costs by 75% with no impact on active work.

Archive 2022 Projects — last active: 2024-01-03, 22.4 GB
Legacy Intranet — last active: 2023-11-15, 18.7 GB
FY2023 HR Records — last active: 2024-02-28, 15.2 GB
Retired Products Wiki — last active: 2023-09-20, 12.8 GB
IT Runbooks (Old) — last active: 2024-01-18, 9.6 GB
…and 3 more

15 files with excessive version history consuming 18.4 GB of extra storage (4.2% of 438.2 GB total used storage across scanned sites).

Excessive file versions consume storage without adding business value.

312 file(s) have versions older than 180 days consuming 6.7 GB. Consider trimming old versions to reclaim storage.

2,840 stale files (unmodified >1 year) totaling 14.2 GB across 8 site(s) scanned.

Old unused files increase storage costs and make it harder to find relevant content.