New M365 Audit & Governance

See who can open what. Fix what nobody owns.

One app to find oversharing in SharePoint and OneDrive, Teams and sites nobody uses or owns, and Power Automate flows and Power Apps left behind by people who left – and to fix them in a few clicks.

Start free trial Buy a license User guide (PDF)
  • Read-only audits
  • Changes only when you confirm
  • Every action logged
Teams, groups and sites audit with inactive workspaces, ownerless groups and disabled owners
Anyone links foundDown to single files
Owners addedLogged with the result
Sharing links & guests Teams & Microsoft 365 groups SharePoint sites & OneDrive Power Automate & Power Apps E-mail owners
Three audits

The governance questions every Microsoft 365 admin gets asked

Each audit only reads. Results are sorted by risk, filtered in one click and exported to CSV for your auditors.

Permissions & sharing

Every unique permission in SharePoint sites and OneDrives – sites, lists, libraries, folders and single files. Anyone and organization-wide links, guests, "Everyone", site collection administrators, and who is inside each SharePoint group.

Teams, groups & sites

Teams, Microsoft 365 groups and SharePoint sites with no activity for 6 months (or any period you choose), without an owner, with disabled owners or a single owner. E-mail the owners and add owners where they are missing.

Power Platform

Power Automate flows and Power Apps whose owner was deleted or disabled. See which still have an active co-owner, and transfer ownership or add a co-owner before they stop working.

How it works

Connect, audit, act

Connect

Sign in as an administrator with MFA – no app registration needed – or use an App ID for unattended audits. The app shows which of your roles allow what.

Audit

Choose the sites or the inactivity period and start – or schedule it. Findings appear while the audit runs, sorted by risk.

Act & prove

Select findings and e-mail owners, add owners or transfer ownership – after a preview and your confirmation. Every action lands in the actions log.

Permissions & sharing

Oversharing, down to the file

Anyone links on a budget spreadsheet, a guest with Contribute on a folder, "Everyone" with Edit on a list – found and rated, with the people view showing who can reach the most.

  • Anyone, organization and specific-people links
  • Guests – also inside SharePoint groups
  • Every site and OneDrive from the admin center
Permissions and sharing results with sharing links, groups and their members
Inactive workspaces

Ask the owners before you archive

One e-mail per team, group or site to its active owners, from a shared mailbox – with the name, address and last activity filled in. Preview it before anything is sent.

  • Last activity from Microsoft 365 usage reports
  • Your own subject and message, with placeholders
  • Ownerless teams and groups get new owners in bulk
E-mail the owners dialog with a preview of the message
Power Platform

No more flows nobody can edit

When an employee leaves, their flows and apps keep running – until something breaks and nobody can open them. Find them across environments and hand them to a new owner.

  • Deleted and disabled owners from Microsoft Entra ID
  • Active co-owners shown, so you know what is safe
  • Transfer app ownership or add a co-owner
Power Platform audit listing orphaned flows and apps
Questions

Good to know

Does the audit change anything?
No. Audits only read. Changes – e-mails to owners, new owners, ownership transfers – happen only when you select findings, preview the action and confirm it. Every action is written to the actions log with its result.
Which permissions does it need?
SharePoint permission audits use a SharePoint connection: sign in as a SharePoint administrator with MFA, or an App ID with Sites.FullControl.All. Teams, groups, sites and Power Platform work either way: sign in as an administrator with MFA – the audits use your roles, such as Groups, Teams, Power Platform administrator or Reports Reader, with no app registration – or use an Entra ID app registration with Group.Read.All, User.Read.All and Reports.Read.All (plus Group.ReadWrite.All and Mail.Send for the actions) for unattended audits.
Can I see everything one person can open – and give someone else the same access?
Yes. Sharing → User access lists every site, subsite, list, library, folder and file a person can open, and whether that is direct, through a SharePoint group, a sharing link or Everyone. Copy to another person then adds a new colleague or a replacement to the same groups and gives them the same permission levels – nobody is notified, and every change is logged. How it works
How does it know a team is inactive?
From the Microsoft 365 usage reports – the last activity of each team, group and SharePoint site (files, messages, e-mail to the group, page views). You choose the period: 3 months, 6 months, a year or any number of days.
What is an orphaned flow?
A Power Automate flow or Power App whose owner (or the flow's creator) was deleted or disabled in Microsoft Entra ID, and that has no other active owner. Nobody can edit it, and its connections often stop working. The app lists them and lets you assign a new owner.
Can I schedule audits and see what changed?
Yes. Any audit can repeat every week or month, and e-mail a summary of what is new, fixed and changed since the previous run. The Changes tab compares any two runs. Results can be exported to CSV.
Can it fix what it finds?
Yes – select findings and remove the sharing link, guest, "Everyone" or other permission, or let a folder, file or list inherit its parent's permissions again. You confirm every change, nobody is notified, and every change is logged. How it works
Start free trial See pricing User guide (PDF) All products