Skip to content

Glossary

A Global Administrator of your tenant, or a user with the IR.Admin app role, signed in from your tenant. Only administrators change settings for everyone, dashboard defaults and API clients.

The ten groups the reports belong to for the API and the report reference: Entra ID, Security, Intune, Exchange Online, SharePoint Online, OneDrive, Teams and collaboration, Licensing, Compliance and Tenant. API clients get their rights per area.

Tenant data the app keeps in the server’s memory and refreshes in the background. Reports built from it open at once; the data line shows Data as of and the time of the last refresh.

One kind of tenant data the app keeps, such as users, groups or managed devices. Settings > Data & cache lists every data source with its state and refresh interval.

An administrator turned a data source off under Settings > Data & cache. Nothing is fetched for it, and reports that need it say so.

A row of a findings list that is rated critical, serious or warning: something to fix or review.

A report that checks something and rates each row by severity, instead of listing every object.

What an API client may do in an area: Read, Refresh (includes read) or Run scan (includes refresh).

A Microsoft subscription product. Microsoft names each with a technical code (a SKU part number such as SPE_E5); IntensiveReports shows the product name where it knows it.

A report read from Microsoft when someone opens it, usually because it uses PowerShell or slow calls. Its result is kept for a while (one hour unless changed) and shared by everyone; the data line shows Loaded.

A sign-in method that cannot be phished: FIDO2 security keys and passkeys, Windows Hello for Business, platform credentials (such as the macOS Secure Enclave key) and multifactor certificate-based authentication. Authenticator push or phone sign-in, one-time codes, SMS, voice calls, e-mail, single-factor certificates and Temporary Access Passes are not. IntensiveReports uses this one rule in every report and on the dashboard.

An Entra ID directory role with administrative power, such as Global Administrator. Reports about admins use one shared list of these roles.

A dashboard widget that shows one report’s key numbers and most serious rows.

A report that reads a lot of data and runs only when someone presses Run scan (or an API client starts it). The last result is kept until the next scan.

How serious a row of a findings list is: Critical, Serious, Warning, OK or Info.

A number that decides when a report counts something as a problem, such as days without sign-in. Administrators set thresholds under Settings > Report thresholds.

One card on a dashboard, answering one question.