Skip to content
IntensiveReports IntensiveReports

What it covers

IntensiveReports has 319 reports in ten areas. The menu groups them by workload; the areas below are the ones the report reference and the API use. Each area ends with a link to its full list.

AreaReports
Entra ID129
Intune64
Exchange Online47
Licensing18
Security15
SharePoint Online14
Compliance10
Teams and collaboration10
Tenant10
OneDrive2

Entra ID

Section titled “Entra ID”

Users, guests, groups, devices, roles, apps and Conditional Access. The reports cover identity hygiene (inactive and disabled accounts, groups without owners, data quality), privileged access (permanent versus just-in-time admin roles, role assignments made outside PIM, stale administrators), sign-in security (MFA coverage, phishing-resistant methods, risky users, unusual sign-ins), app security (high-privilege permissions, consents, expiring secrets) and the identity lifecycle (joiners, movers, leavers and guest sponsorship).

All 129 Entra ID reports

Security

Section titled “Security”

Defender, Secure Score and security operations: alerts and incidents, vulnerable and unhardened devices, sensor and onboarding gaps, phishing simulation results and how far the tenant’s configuration has drifted.

All 15 Security reports

Exchange Online

Section titled “Exchange Online”

Mailboxes, distribution lists, mail flow and mail security. Find external forwarding, suspicious inbox rules, delegated access, shared mailboxes people can sign in to, and gaps in SPF, DKIM, DMARC and anti-phishing settings. These reports use Exchange Online PowerShell, so they load when someone opens them.

All 47 Exchange Online reports

Intune

Section titled “Intune”

Managed devices, apps and policies on every platform. See compliance, encryption, OS versions and patch levels, devices that stopped syncing, policy deployment errors, Autopilot and enrolment problems, and expiring Apple tokens and certificates.

All 64 Intune reports

SharePoint Online

Section titled “SharePoint Online”

Sites, libraries and sharing. Find sites open to the whole company (a common Copilot oversharing risk), sites without an active owner, inactive sites, custom scripts and how much storage version history takes.

All 14 SharePoint Online reports

OneDrive

Section titled “OneDrive”

Every OneDrive in the tenant, and the OneDrives of people who have left that nobody has taken over.

Both OneDrive reports

Teams and collaboration

Section titled “Teams and collaboration”

Teams, channels, apps and Teams Phone: ownerless and inactive teams, shared channels with external members, external access and federation, meeting and guest policies, phone numbers, emergency addresses and Teams Rooms devices.

All 10 Teams and collaboration reports

Licensing

Section titled “Licensing”

What you bought, what is assigned and what is used. Find licences to reclaim, overlapping assignments, assignment errors, unused add-ons, Copilot adoption and candidates, and the renewal dates of your subscriptions.

All 18 Licensing reports

Compliance

Section titled “Compliance”

Retention, holds and data protection: litigation hold and retention coverage, open eDiscovery cases, DLP and sensitivity label policies, audit readiness, Microsoft 365 Backup coverage, and unusual admin or file activity.

All 10 Compliance reports

Tenant

Section titled “Tenant”

The tenant as a whole: Microsoft service health and the Message Centre, storage growth, group and Teams sprawl, Power Platform and Copilot agents.

All 10 Tenant reports