# Free Tenant Optimizer Scan > The Free Tenant Optimizer Scan is a read-only review of your Microsoft 365 tenant. IT Partner connects with read-only access, analyzes licensing waste, dormant accounts, security gaps, and configuration drift, and delivers a written report ranked by severity — with the fixable issues costed. Nothing in your tenant is changed, no mailbox or file content is ever read, and you can revoke access in one click in your Entra admin portal. Canonical: https://o365hq.com/services/free-tenant-optimizer-scan Provider: IT Partner LLC — US Microsoft partner since 2006. Book: https://o365hq.com/book **Price:** Included with IT Partner licensing · prospective clients: up to three scans as a trial · **Duration:** 2–3 business days · Fixed price, pay after approval. ## Overview Most Microsoft 365 tenants quietly accumulate waste and risk: licenses assigned to people who left, dormant accounts that still hold access, security defaults that were never hardened, and configuration drift from years of one-off changes. The Tenant Optimizer Scan surfaces all of it in one pass. IT Partner connects to your tenant with read-only permissions and collects licensing, account, and configuration data — never mailbox or file content. You receive a written report that ranks findings by severity and puts a price on each fixable issue, so you can decide what to act on with real numbers in hand. The scan is free, there is no obligation, and access can be revoked by you at any moment. ## Success criteria - A written report of licensing waste, dormant accounts, security gaps, and configuration drift, ranked by severity - A costed list of the fixable issues, so every recommendation comes with a number - Zero changes made to your tenant — the scan is read-only from start to finish - You keep full control: access is revocable in one click in your Entra admin portal ## Deliverables - Written Tenant Optimizer report ranked by severity - Licensing waste analysis (unused, duplicate, and mis-tiered licenses) - Dormant and stale account inventory - Security gap summary with prioritized recommendations - Configuration drift findings against Microsoft recommended baselines - Costed remediation list — a quote for each fixable issue, if you want IT Partner to fix it ## Implementation plan 1. **Grant read-only access** — You approve a read-only connection to your tenant; we confirm the scope together. 2. **Automated + engineer-led collection** — Licensing, account, and configuration data is collected. No mailbox or file content is read. 3. **Analysis and report** — Findings are ranked by severity and the fixable issues are costed. 4. **Walkthrough (optional)** — A 30-minute call to walk the report — or we just send it, your choice. ## Prerequisites - A Microsoft 365 tenant used in production - A Global Administrator available to approve the read-only connection (one click) ## Responsibilities **IT Partner:** - Request the minimal read-only permission set - Collect and analyze licensing, account, and configuration data - Deliver the written report ranked by severity, with fixable issues costed - Delete collected data on request after the engagement **Client:** - Approve the read-only connection - Identify any accounts or areas that are out of scope - Review the report — and revoke access whenever you choose ## Not included - Any changes to your tenant — the scan is strictly read-only - Reading of mailbox or file content - Remediation work (quoted separately in the report, only if you want it) ## Limitations & technical notes - The scan reflects the tenant state at the time of collection. - Some findings depend on the licensing tier in place — features your licenses do not include are noted, not assumed. ## FAQ ### Who can request a scan? Clients who buy their Microsoft licensing through IT Partner: included, as often as you like. Prospective clients: up to three scans as a trial, to assess what the Tenant Optimizer finds and whether we are the right partner. No purchase is required for the trial. ### Is it really read-only? Yes. The connection uses read-only permissions, nothing in your tenant is changed, and no mailbox or file content is read — the scan looks at licensing, accounts, and configuration only. ### How do I revoke access? One click in your Entra admin portal, at any time. We also confirm removal at the end of the engagement. ### What's the catch with free? None for clients: organizations that buy their Microsoft licensing through IT Partner get the scan included, as often as they like. Prospective clients can request up to three scans as a trial to see what it finds, with no commitment. Either way the report includes a quote for fixing what we find; if you'd rather fix it yourself, or do nothing, the report is still yours. ### How long does it take? We confirm your request the same business day and arrange read-only access. The written report typically arrives 2–3 business days after access is granted. --- Fixed-price engagement by IT Partner LLC. To scope it for your tenant, book a call with Mike (https://o365hq.com/book) or request a quote via the site's /api (see https://o365hq.com/openapi.json).