SharePoint Embedded & Loop Containers
The question it answers: Which SharePoint Embedded and Loop containers exist per app, and how much storage do they use?
Loop workspaces, Designer and third-party SharePoint Embedded apps store content in containers that do not appear in the site list but count against the tenant storage. This report lists every container per app with its storage and flags containers whose owners have all left.
At a glance
Section titled “At a glance”| Where in the app | SharePoint Online › SharePoint Operations & Legacy › SharePoint Embedded & Loop |
| Workload | SharePoint Online |
| Kind | Findings list · dashboard tile |
| Data | Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report. |
| Licence | None (SharePoint Embedded apps may be billed separately). |
| Report id (API and MCP) | sharepoint.operations.embedded-containers |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Severity | Severity | Status |
| App | Category | Text |
| Container | Subject | Link |
| Check | Setting | Text |
| Owners | Value | Text |
| Finding | Finding | Text |
| Status | Detail | Text |
| Created | When | Date |
| GB | Number | Number |
A findings list hides columns that no row fills. Severity is Critical, Serious, Warning, OK or Info; rows rated Critical, Serious or Warning need attention (Working with findings).
What it needs
Section titled “What it needs”Licence: None (SharePoint Embedded apps may be billed separately).
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
Sites.FullControl.All | Office 365 SharePoint Online | Have full control of all site collections | certificate PnP |
User.Read.All | Microsoft Graph | Read all users’ full profiles | owner state |
User-LifeCycleInfo.Read.All | Microsoft Graph | Read all users’ lifecycle information | with |
User.Read.All | Microsoft Graph | Read all users’ full profiles | with |
Data sources it reads
Get-PnPContainerTypeGet-PnPContainerGet-PnPContainer -Identity (per container)
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/sharepoint.operations.embedded-containers?size=100An AI assistant reads it with the MCP tool get_report and the id sharepoint.operations.embedded-containers. The client needs the Read grant for SharePoint Online. See Using the API.