01 — Overview
What this engagement is
This service provides a no-cost automated review of your Microsoft 365 tenant. IT Partner assesses tenant configuration, security posture and Secure Score, licensing assignment and utilization, identity and admin hygiene, and common misconfigurations. The result is a standardized report with prioritized findings, recommended improvements, and clear next steps.
02 — Outcomes
Success criteria
01Leadership receives a fast, objective read on Microsoft 365 tenant health at no cost.
02The assessment identifies prioritized findings across security, licensing, and configuration.
03The report provides recommended improvements and clear next steps.
04The assessment creates a natural path into a deeper optimization or remediation engagement where warranted.
03 — Deliverables
What you receive
✓Standardized Tenant Health Check report covering security, licensing, and configuration.
✓Prioritized list of recommended improvements.
✓Clear next steps.
04 — Plan
How the work unfolds
Milestone 1
Confirm assessment scope, tenant contact, timing, and required administrative consent or read-only permissions.
Milestone 2
Collect basic tenant context, including primary tenant domain, tenant ID if available, licensing objectives, and any known areas of concern.
Milestone 3
Run the standardized automated Microsoft 365 tenant assessment using approved access and read-only data collection methods.
Milestone 4
Review assessment outputs across tenant configuration, Secure Score and security posture, licensing assignment and utilization, identity hygiene, administrator hygiene, and common misconfiguration areas.
Milestone 5
Prioritize findings by risk, business impact, and likely effort so the report focuses on practical next steps rather than raw tool output.
Milestone 6
Prepare and deliver the standardized Tenant Health Check report.
Milestone 7
Provide a concise findings review and next-step recommendation path, including whether a deeper paid tenant analysis or remediation engagement is appropriate.
05 — Before we start
Prerequisites
→Client authorization from an appropriate tenant owner, executive sponsor, or Microsoft 365 administrator to perform the assessment.
→A designated client technical contact who can coordinate access, answer tenant context questions, and receive the report.
→Temporary least-privilege Microsoft 365 access sufficient to review tenant configuration, security posture, usage, licensing, and identity/admin hygiene. This commonly includes read-oriented roles such as Global Reader, Security Reader, Reports Reader, or equivalent permissions, depending on the assessment method.
→If an assessment application or delegated partner access is used, the client must approve the required admin consent before data collection begins.
→Microsoft 365 admin center and reporting data must be available for the tenant; some utilization and activity findings depend on Microsoft’s available reporting history and retention.
→Any required privacy, NDA, or internal approval steps should be completed before access is granted.
06 — Working together
Who does what
IT Partner
- Confirm the assessment approach, required permissions, and target completion window with the client.
- Use approved access only for the purpose of performing the Tenant Health Check.
- Perform the standardized automated review of Microsoft 365 tenant configuration, Secure Score and security posture, licensing assignment and utilization, identity and admin hygiene, and common misconfigurations.
- Review the automated findings for relevance and prioritize them into a practical recommendation list.
- Produce the standardized Tenant Health Check report covering security, licensing, and configuration.
- Provide clear next steps and identify whether a deeper paid optimization or remediation engagement is warranted.
- Coordinate removal or expiration of temporary access after the assessment is complete, where applicable.
Your team
- Designate a business or IT sponsor and a technical point of contact for the assessment.
- Provide the tenant domain, tenant ID if requested, and any relevant context about licensing, security concerns, recent changes, or known pain points.
- Grant the agreed read-only or delegated permissions required for assessment data collection.
- Ensure required access remains available during the 2-3 business day assessment window.
- Review the delivered report and prioritize internal decisions on recommended next steps.
- Revoke temporary access after completion if access is not automatically removed or no longer required.
07 — Scope
What's not included
✕Custom, tailored analysis with in-depth recommendations and report iterations; deeper tailored analysis is available as a separate, paid tenant analysis engagement.
✕Remediation, tenant configuration changes, policy implementation, migration work, or hands-on engineering changes.
✕Penetration testing, compromise assessment, forensic investigation, legal compliance certification, or formal audit attestation.
✕Detailed license contract reconciliation, procurement negotiation, or financial true-up analysis beyond the standardized licensing assignment and utilization review.
✕Custom workshops, executive presentations, repeated report revisions, or environment-specific implementation design beyond the standardized report and next steps.
08 — Fine print
Limitations & technical notes
!The Tenant Health Check is a point-in-time assessment based on information available during the review window.
!Findings depend on the permissions granted, Microsoft 365 reporting availability, tenant telemetry, and the accuracy of data exposed through Microsoft admin portals and APIs.
!The assessment does not guarantee that the tenant is secure, compliant, optimized, or free of misconfiguration.
!Microsoft Secure Score is a useful posture indicator but is not a complete measure of security maturity, compliance, business risk, or operational readiness.
!Licensing utilization findings are directional and based on available Microsoft 365 assignment and usage reporting; they may require additional commercial analysis before purchasing, cancelling, or reallocating licenses.
!Because this is a free standardized assessment, recommendations are prioritized at a practical summary level and are not a substitute for a tailored architecture review or remediation plan.
09 — Questions
Frequently asked questions
What is the Microsoft 365 Tenant Health Check?
The Microsoft 365 Tenant Health Check is a free, standardized automated assessment of an organization’s Microsoft 365 tenant. It gives leadership and IT teams a quick, objective view of tenant health before deciding whether deeper optimization or remediation is warranted.
Is the Microsoft 365 Tenant Health Check really free?
Yes. The Tenant Health Check is free of charge, and the scope is confirmed in writing before work begins. It is a standardized automated assessment rather than a paid consulting engagement — deeper tailored analysis and remediation are separate, paid services.
What does the Microsoft 365 Tenant Health Check include?
The assessment includes an automated review of Microsoft 365 tenant configuration, security posture and Secure Score, licensing assignment and utilization, identity and admin hygiene, and common misconfigurations. The output is a standardized report with prioritized findings, recommended improvements, and clear next steps.
What deliverables do we receive from the Tenant Health Check?
You receive a standardized Tenant Health Check report covering security, licensing, and configuration. The report includes a prioritized list of recommended improvements and clear next steps so your team can decide what to address next.
How long does the Microsoft 365 Tenant Health Check take?
The standard duration for this assessment is 2-3 business days. Exact scheduling and turnaround should be confirmed with IT Partner, because timing may depend on access, tenant complexity, and availability.
Does the Tenant Health Check make changes to our Microsoft 365 tenant?
No. The Tenant Health Check is an assessment and reporting engagement performed with read-only access. Remediation, configuration changes, and implementation work are handled separately if your organization decides to act on the findings.
Will the Tenant Health Check cause downtime or affect users?
No downtime is expected. The service is an automated, read-only assessment and does not include tenant changes or migration activity. The assessment method and access requirements are confirmed with you before work begins.
Does the Tenant Health Check review Microsoft 365 licensing?
Yes. The service reviews licensing assignment and utilization and reports licensing-related findings in the overall tenant health report. Findings are directional — detailed license contract reconciliation, procurement, and financial true-up analysis are not included.
What is not included in the free Tenant Health Check?
Custom, tailored analysis with in-depth recommendations and report iterations is not included, and neither are remediation or configuration changes. Deeper tailored analysis is available as a separate, paid tenant analysis engagement, and remediation can be scoped separately once findings are in hand.
What prerequisites are required for the Tenant Health Check?
You need authorization from a tenant owner or Microsoft 365 administrator, a designated technical contact, and temporary least-privilege read access — commonly roles such as Global Reader, Security Reader, or Reports Reader, depending on the assessment method. If an assessment application or delegated partner access is used, admin consent must be approved before data collection begins.
What happens after the Tenant Health Check is complete?
After completion, your organization receives the standardized report with prioritized findings and recommended next steps. If the findings show that deeper work is needed, the assessment can lead naturally into a paid optimization or remediation engagement.
Does the Tenant Health Check guarantee that our Microsoft 365 tenant is secure or compliant?
No, the service is an assessment and reporting engagement, not a guarantee of security, compliance, or risk elimination. It provides an objective view of tenant health and prioritized recommendations so your organization can decide what improvements to pursue.