Running an audit and reading the results
Pick the scope and run: read-only, in parallel, across Entra ID, Exchange, SharePoint, OneDrive, Teams, Defender, Purview and Intune. The work is in the failures.
How an audit runs
- Full catalog or named baseline as the scope
- Parallel execution, 1 to 16 simultaneous controls
- Read-only — no write scope exists anywhere in the app
- Duration scales with tenant size — seconds to a few minutes
- Verdicts: compliant, non-compliant, warning, not assessed
- Weighted score: L1 fundamentals weigh 3× hardening
- Failed controls ship remediation steps and verification PowerShell
- Export always covers the whole audit, never a filtered view
Going further in the guide: running an audit and reading the verdicts.