Offboarding is a time sensitive operation that must follow strict and detailed procedures to ensure access to confidential information is no longer available to ex-employees. Their access must be revoked quickly. Doing this without a PowerShell script takes too long yet using a script is risky and can lead to errors.

• Select and target the employees scheduled for layoff in less than a minute
• Transfer user files and emails to a designated manager
• Ensure confidential information is no longer available to ex-employees

Employees who don’t register their multi-factor authentication (MFA) methods or information can cause security breaches. To close these security gaps, you need to identify which employees have missing MFA information but using the Microsoft 365 admin portal is difficult and PowerShell scripts are risky.

• Gain a view of all users and their registered methods in one place
• Identify which employees have missing MFA information and take corrective action
• Avoid having to use the Microsoft admin portal or PowerShell

IT admins are often tasked with finding cost-cutting opportunities by identifying and re-assigning unused or under-utilized licenses. Gathering the necessary information to run this kind of report is difficult and time-consuming as the information needs to be gathered.

• Gain a global view of users, organized by department, type of license, usage and cost to the company
• Pinpoint how many licenses are assigned to users on leave or no longer with the company
• Remove unused licenses, including ones assigned through groups, in just a few clicks
• Avoid the risk of PowerShell scripts

IT admins have to make sure new corporate policies are enforced efficiently, such as ensuring that Teams is the only software used for employee collaboration and meetings. To ensure that users are not using less secure communications platforms, a report on Teams usage frequency by department.

• View each users’ activity by department or any other parameter you choose
• Schedule a report to be run and sent automatically
• Avoid risk of manual errors

Sensitive documents are often stored in Teams channels, but they can be easily shared if the Teams channel is not private. To make sure private and sensitive documents are only shared by approved personnel you will need to find all the private channels and report on the members in those channels and remove employees who should not be there. Doing this is labour intensive and it’s easy to miss a Team.

• Gain a view of all Teams and channels in one view
• Filter to see private channels only and review their members
• Flag members who may not be approved to share documents
• Remove unapproved members in one click

Delegating specific IT tasks to other team members is a great way to offload work but it can also increase risk. Microsoft Administrative Units do not allow you to segment roles as required because they are based on only one parameter. The permissions are either too broad or too narrow.

• Create custom roles according to task requirements and scope
• Assign roles with actions and target sets that are exactly as wide or as narrow as you need
• Assign roles to groups or across multiple tenants
• See all roles in a centralized view
• Use automation to assign tasks to non-technical personnel

Running different reports in a hybrid environment when the accounts are on premises can be difficult as you will have to use the Active Directory Users and Computers (ADUC). It allows you to see only one account at a time and check each account for the specific data you need. The process is tedious and error-prone but using a PowerShell is also risky.

• See all users accounts and their attributes, whether they are on-prem or on the cloud
• Identify old users using whichever parameters you choose, such as last log on or password change
• Manipulate the data and organize it according to your reporting needs
• Save your customized view and export the data to an Excel spreadsheet

Employees’ calendars can get crowded and hard to manage when they are added to meetings automatically and sometimes incorrectly. To clean up employees’ calendars manually using the admin portal is very difficult to do, especially when there is a large user community, and using PowerShell is always risky and can lead to errors if you are not a PowerShell expert.

• Use filters to get a list of the employees with affected calendars
• View all the calendar details in one place
• Edit or remove recurrent meetings

An inventory of all registered devices should be performed periodically so that IT admins can keep track of these devices. An inventory will provide information about which devices may be outdated and need to be replaced but aggregating all the relevant data takes time and the Microsoft Entra admin center will only give you limited details.

• Gain a view of over 50 additional properties, all in one place
• Use filtering, grouping and sorting capabilities to manipulate the data in whichever way you want
• Export your data to Excel so you can report on it