Approve read-only access
A Global Administrator signs in to Microsoft and approves read-only access for . You never share a password with us, and you can remove access at any time. Checking Exchange Online needs one more step afterwards, which we'll walk you through.
Connecting to your tenant…
This usually takes less than a minute.
- Access approved
- Connected to Microsoft 365
- Checking licenses and activity
- Preparing your report
Keep this page open. Your report appears here when it finishes.
One setting to change first
Your tenant hides user names in Microsoft's usage reports, so we can't tell which licenses are actually being used.
- Open Microsoft 365 admin center → Settings → Org settings → Reports
- Clear Display concealed user, group, and site names in all reports
- Select Save, wait a few minutes, then check again here
One more step: read-only Exchange access
Access is approved. To check your Exchange Online settings (mail forwarding, anti-phishing, transport rules, auditing and more), Microsoft also needs the app to hold the read-only Global Reader role.
- Open Microsoft Entra admin center → Roles & admins
- Select Global Reader, then Add assignments
- Search for (app ID ), select it and assign it
- Come back and select Check again. Exchange can take a few minutes, occasionally longer, to recognize the new role.
Global Reader can view settings across Microsoft 365 but can't change anything. Deleting the app in Microsoft Entra later also removes the role.
Connected. Ready to run.
The assessment takes 2–5 minutes for most tenants and only reads data.
Your report is ready
Save a copy now. This download link works for 7 days.
Exchange Online settings weren't included because the Global Reader step wasn't completed. Complete it and start again for the full report.
To remove our read-only access later, a Global Administrator can delete the app in Microsoft Entra.