Microsoft 365 · One-time review
Service group: Microsoft 365Know exactly how your Microsoft 365 tenant is set up before you change it
A tenant assessment is a fixed-scope review with a clear end: we examine licences, administrator access, identity and sign-in policy, email protection, devices, sharing and logging, then give you a written report with prioritized findings. What you do next is your decision.
At a glance
- Service
- One-time, fixed-scope review of a Microsoft 365 tenant’s configuration with a written report and findings walkthrough
- Best suited to
- Canadian organizations of roughly 5 to 200 employees considering a new provider, a security project, a licence change or a migration
- Deliverables
- Written report covering licences, admin roles, identity, email, devices, collaboration and logging, with prioritized recommendations and a review meeting
- Not included
- Remediation work, penetration testing, forensic investigation of a suspected breach and formal compliance audits
- Access required
- Read-only or time-limited administrative access agreed in advance, removed when the assessment ends
- Pricing basis
- Proposed fixed fee per tenant for each review product, shown in the store and confirmed in a written quotation
What a tenant assessment is
A Microsoft 365 tenant assessment is a point-in-time review of how your tenant is configured. It is not an ongoing service and it does not change anything. We collect configuration data, compare it with Microsoft’s guidance and our own small-business baseline, and explain what we found in plain language.
The assessment covers the whole tenant at a practical depth: who holds admin rights, how people sign in, whether licences match usage, how email is protected and authenticated, which devices are managed, what is shared externally, and whether audit logs would help an investigation. Each finding is rated by risk and effort so you can decide what to fix first.
In the store, this scope is covered by two fixed-price products: the Microsoft 365 Tenant Review examines licences, accounts, mailboxes, Teams, SharePoint and administrator structure, and the Microsoft 365 Security Assessment examines sign-in policy, email authentication, device protection and logging. Order one or both. If you already know you want ongoing help, Microsoft 365 Managed Services includes a baseline review during onboarding.
When an assessment makes sense
You inherited a tenant
A new office manager, owner or IT lead has taken over Microsoft 365 with no documentation from whoever set it up.
You are changing providers
You want an independent view of what your current or previous provider configured before deciding who manages it next.
Licence costs keep rising
Your Microsoft bill grows each year and you are not sure every licence is needed or matched to the right plan.
An insurer or client is asking questions
A cyber insurance renewal or client security questionnaire asks about MFA, admin accounts and logging, and you need accurate answers.
What we review
Licences and subscriptions
Assigned versus purchased licences, inactive accounts holding licences, and whether Basic, Standard or Premium suits each group.
Administrator access
Who holds Global Administrator and other privileged roles, whether admin accounts are separate and protected, and emergency access arrangements.
Identity and sign-in
MFA coverage and methods, security defaults or Conditional Access policies, legacy authentication, guest users and app consent settings in Entra ID.
Email
SPF, DKIM and DMARC records, Exchange Online Protection and Defender for Office 365 policies, and external forwarding.
Devices
Intune enrolment and compliance, encryption reporting and endpoint protection coverage where licensed.
Collaboration and logging
SharePoint, OneDrive and Teams sharing settings, unified audit log status and alert policies.
What the assessment includes, and what it does not
Included
- Kick-off call to confirm goals, access and contacts
- Configuration review across licences, identity, email, devices, sharing and logging
- Microsoft Secure Score review as one input
- Written report with findings rated by risk and effort
- Prioritized recommendations and rough sequencing
- Walkthrough meeting to discuss findings and questions
- Removal of assessment access at the end
Not included
- Making configuration changes or remediation
- Penetration testing or vulnerability scanning of networks
- Investigation of an active or suspected compromise
- Compliance certification or legal advice
- Review of non-Microsoft applications
Areas and tools examined
- Microsoft 365 admin centre licensing and usage reports
- Microsoft Entra admin centre roles, sign-in logs and policies
- Exchange admin centre and Microsoft Defender portal policies
- Microsoft Intune device and compliance reports
- SharePoint and Teams admin centre sharing settings
- Microsoft Purview audit configuration
- Microsoft Secure Score and PowerShell-based configuration exports
Who this is for
Decision makers without IT staff
Owners and managers who need an independent, plain-language view of their Microsoft 365 setup.
Internal IT leads
IT staff who want a second set of eyes and a prioritized list to bring to leadership.
Organizations planning change
Businesses preparing for a migration, a merger, Copilot adoption or a move to a new provider.
What you get from it
- A factual picture of your tenant, documented
- Findings ranked so you know what matters most
- Licence savings or upgrade needs identified
- Accurate answers for insurers and client questionnaires
- No obligation to buy ongoing services afterwards
How the assessment runs
Order or quotation
Choose the Microsoft 365 Tenant Review, the Microsoft 365 Security Assessment or both in the store, or request a quotation; the price is confirmed in writing.
Kick-off and access
We confirm goals and contacts and agree read-only or time-limited access.
Data collection and analysis
We gather configuration data and compare it with guidance and our baseline.
Report and walkthrough
You receive the written report and we walk through findings and options with you.
Access removed
Assessment access is removed and you decide on any next steps.
Assessment options
Prices are proposals until confirmed in a written quotation.
Microsoft 365 Tenant Review
Licences, accounts, mailboxes, Teams, SharePoint and administrator structure, at a proposed fixed fee per tenant.
Microsoft 365 Security Assessment
Sign-in policy, email authentication, device protection and logging, at a proposed fixed fee per tenant. Pair it with the Tenant Review for the full scope on this page.
IT Infrastructure Health Check
A wider review that includes networks, servers, devices and backup alongside Microsoft 365.
Frequently asked questions
Will the assessment change anything in our tenant?
No. It is a review only. Any changes are made later, by you, by us under a separate quotation, or by another provider.
What access do you need?
Read-only roles cover most of the review. Some reports need elevated access, which we request for a limited time and remove when the assessment ends.
Is this a security audit or penetration test?
No. It reviews configuration against good practice. It does not attempt to exploit systems and is not a compliance audit.
Do we have to sign up for managed services afterwards?
No. The report is yours. You can use it to decide what to fix internally or to brief your existing provider.
How long does it take?
It depends on tenant size and access timing. We confirm the expected timeline when you order or in your quotation.
Related services
Products and packages
Industries we support
Service areas
Get a clear picture of your Microsoft 365 tenant
Order the Microsoft 365 Tenant Review, add the Security Assessment for security controls, or book a consultation to discuss scope. The price is confirmed in a written quotation.