01 — Overview
What this engagement is
Most Microsoft 365 tenants quietly accumulate waste and risk: licenses assigned to people who left, dormant accounts that still hold access, security defaults that were never hardened, and configuration drift from years of one-off changes. The Tenant Optimizer Scan surfaces all of it in one pass. IT Partner connects to your tenant with read-only permissions and collects licensing, account, and configuration data — never mailbox or file content. You receive a written report that ranks findings by severity and puts a price on each fixable issue, so you can decide what to act on with real numbers in hand. The scan is free, there is no obligation, and access can be revoked by you at any moment.
02 — Outcomes
Success criteria
01A written report of licensing waste, dormant accounts, security gaps, and configuration drift, ranked by severity
02A costed list of the fixable issues, so every recommendation comes with a number
03Zero changes made to your tenant — the scan is read-only from start to finish
04You keep full control: access is revocable in one click in your Entra admin portal
03 — Deliverables
What you receive
✓Written Tenant Optimizer report ranked by severity
✓Licensing waste analysis (unused, duplicate, and mis-tiered licenses)
✓Dormant and stale account inventory
✓Security gap summary with prioritized recommendations
✓Configuration drift findings against Microsoft recommended baselines
✓Costed remediation list — a quote for each fixable issue, if you want IT Partner to fix it
04 — Plan
How the work unfolds
Grant read-only access
You approve a read-only connection to your tenant; we confirm the scope together.
Automated + engineer-led collection
Licensing, account, and configuration data is collected. No mailbox or file content is read.
Analysis and report
Findings are ranked by severity and the fixable issues are costed.
Walkthrough (optional)
A 30-minute call to walk the report — or we just send it, your choice.
05 — Before we start
Prerequisites
→A Microsoft 365 tenant used in production
→A Global Administrator available to approve the read-only connection (one click)
06 — Working together
Who does what
IT Partner
- Request the minimal read-only permission set
- Collect and analyze licensing, account, and configuration data
- Deliver the written report ranked by severity, with fixable issues costed
- Delete collected data on request after the engagement
Your team
- Approve the read-only connection
- Identify any accounts or areas that are out of scope
- Review the report — and revoke access whenever you choose
07 — Scope
What's not included
✕Any changes to your tenant — the scan is strictly read-only
✕Reading of mailbox or file content
✕Remediation work (quoted separately in the report, only if you want it)
08 — Fine print
Limitations & technical notes
!The scan reflects the tenant state at the time of collection.
!Some findings depend on the licensing tier in place — features your licenses do not include are noted, not assumed.
09 — Questions
Frequently asked questions
Who can request a scan?
Clients who buy their Microsoft licensing through IT Partner: included, as often as you like. Prospective clients: up to three scans as a trial, to assess what the Tenant Optimizer finds and whether we are the right partner. No purchase is required for the trial.
Is it really read-only?
Yes. The connection uses read-only permissions, nothing in your tenant is changed, and no mailbox or file content is read — the scan looks at licensing, accounts, and configuration only.
How do I revoke access?
One click in your Entra admin portal, at any time. We also confirm removal at the end of the engagement.
What's the catch with free?
None for clients: organizations that buy their Microsoft licensing through IT Partner get the scan included, as often as they like. Prospective clients can request up to three scans as a trial to see what it finds, with no commitment. Either way the report includes a quote for fixing what we find; if you'd rather fix it yourself, or do nothing, the report is still yours.
How long does it take?
We confirm your request the same business day and arrange read-only access. The written report typically arrives 2–3 business days after access is granted.
Want the full spend picture beyond Microsoft 365? Get an independent second opinion on your whole IT spend →