Risk summary
A single-glance risk posture view for the selected tenant, drawn from the most recent snapshot.
Oldest deviations
Top 3 open deviations, ranked by how long they have been open
Key wins this period
Last 30 days · resolved findings and improving scores
New concerns this period
Last 30 days · new findings and regressions
Where your baseline gaps are, by product
Ranked by percentage of policies open. Select a chart point or a table row to drill down into that product's policy list on the Snapshot history & baseline tab.
Deviations
Every unaccepted deviation in the latest snapshot, in one sortable, filterable table. Deviations that have been formally accepted are listed separately below.
| Policy | Product | Status | Age | Guidance |
|---|
Accepted deviations
| Policy | Product | Status | Reason | Accepted by | Accepted on | Valid |
|---|
Tenant explorer
Browse every policy in the latest snapshot, starting from the Microsoft product it belongs to. Open a product to see its policies grouped by status, then open a policy for its description, differences from the baseline, and any accepted deviations.
Trends
Metrics and licence usage over time. Choose a range below, or compare against the full retained history.
Alignment & Secure Score
Licence utilisation by product family
Number of reviewed policies aligned to the baseline, per licensed product family, over the selected range. Hover a point to see how many policies were reviewed.
Monthly reports
A dated, month-by-month record of this tenant's security baseline progress - what happened, how it compares to the previous month, and what to prioritise next. Drill into any month, or step back to see the bigger picture across several months.
Snapshot history & baseline
Every retained snapshot is kept for a rolling 3 years. Nominate any snapshot below as the baseline for comparisons.
| Snapshot time (UTC) | Alignment score | Secure score | Baseline |
|---|
Baseline comparison
Compares the nominated baseline snapshot against the latest (or a chosen) snapshot.
Changed policies since baseline
| Policy name | Product | Baseline status | Current status |
|---|
Compare any two snapshots
Pick any two snapshots to see the metric deltas and status changes between them.
Reports
Run reports enabled for your tenant. Once a report finishes running, its output is locked permanently - it becomes a fixed record that can be downloaded again at any time, but never edited, re-run over, or deleted.
Report runs
| Report | Format | Requested by | Requested | Status |
|---|
Admin — baseline configuration
Controls which baseline this customer is compared against on every poll. If no override is set, Assure automatically uses whichever baseline has already been aligned to the tenant. Every change made here is recorded below for audit purposes.
Current baseline
Loading…
Change history
| Changed at (UTC) | Changed by | Previous baseline | New baseline |
|---|
Report access controls
Choose which report types this customer may run, and the single output format each is delivered in. Nothing is enabled by default.
| Report type | Tags | Format | Enabled |
|---|
Admin — access mapping
Portal-wide rules, applied at sign-in whichever identity source (Cognito or Auth0) the person uses. Domain mappings are additive to any tenants granted to an individual user.
Email domain → tenants
Anyone signing in with an email at the domain can view the mapped tenants (and only those). The match is exact: example.com does not include sub.example.com.
| Domain | Tenants | Last changed by |
|---|
Add or replace a mapping
Admin identities
An email listed here has the Admin role: it sees every tenant and this Admin section. Members of the Cognito staff group are Admins automatically and are not listed.
| Added by | Added at (UTC) |
|---|