Microsoft will show a permissions screen. At the bottom you will see a checkbox:
☑ Consent on behalf of your organisation
Tick this box before clicking Accept. Without it, M365Clarity can only read your personal account — not your tenant configuration. Your scan will return incomplete or empty results.
This checkbox only appears if you are signed in as a Global Administrator. If you are not a Global Admin, ask your IT admin to connect the tenant on your behalf.
You've got 170+ features in your Microsoft 365 plan. Do you know which ones are actually switched on? M365Clarity does. One scan. Every feature. No portal-hopping.
No credit card. No agent install. Read-only Microsoft Graph access.
MSP? Sign in to your portal →I built M365Clarity because I kept finding the same thing: organisations on E3 or E5, paying for capabilities they’d never turned on, with security gaps that wouldn’t survive a basic audit. The information to fix that existed — it just lived across 15 different admin portals, each requiring a separate login, each showing you a different slice of the same tenant. This pulls all of it into one place.
— Stephen Bennett, Solutions Architect
Trusted by IT teams and MSPs
“Finally a tool that tells me what's actually switched off, not just what we've licensed. Found three critical gaps in the first scan.”
IT Manager
Logistics & Shipping
“The Adoption Coach feature paid for itself on day one — clients can see exactly why Teams usage is low and what to do about it.”
MSP Director
Managed Services
“We run this on every new client tenant before we do anything else. It gives us a baseline in 30 seconds that used to take hours.”
IT Consultant
Professional Services
No configuration. No agents. No waiting.
Authenticate with your Microsoft 365 account. Read-only OAuth — we can never modify your tenant or access your data.
M365Clarity checks your actual configuration via Microsoft Graph — not just licence entitlements. Checks complete in under 30 seconds.
Every feature shows Configured, Needs Review, or Not Verified. Paid tiers unlock AI actions, compliance mapping, Copilot readiness, and PDF reports.
See it in action
Grouped sidebar navigation. 34 tabs across security, identity, compliance, licences, adoption, and AI.
Instant RAG view of every M365 feature. Grouped sidebar navigation replaces the old tab bar.
Pre-populated with realistic dummy data across every tab
Microsoft's built-in tools show you a fraction of your M365 configuration. M365Clarity reads 130+ features across identity, adoption, devices, and collaboration — and explains every finding in plain English.
Every paid plan includes Claude-powered analysis that turns raw scan data into actionable guidance.
Every feature tells you exactly why it is flagged using your actual configuration data — real policy names, real counts. Not generic advice.
30 findings after a scan. Priority Actions tells you which three to fix this week — and why those three, not the others.
Click any feature for a guide built around your tenant — exact admin centre path, PowerShell commands where applicable, and a verification step.
One-click AI report for stakeholders — what is set up, what needs attention, and the quick wins. Plain English. Ready to share.
Each time you open a scan, Claude surfaces one observation worth flagging — patterns, contradictions, or gaps you might otherwise miss.
Stuck on a specific remediation step? Every step in every Setup Guide has a built-in AI assistant scoped only to that step.
One-click board-ready document in plain English — no technical jargon. Headline, top risks, domain grades, next steps. Download as PDF.
Time-bound risk signals based on your scan data and Microsoft's retirement timeline — flags risks before they become critical.
Five-pillar security readiness score (Detect, Protect, Recover, Identity, Compliance) — how prepared are you if an incident happened today?
Analyses every Conditional Access policy in your tenant to surface coverage gaps — which users, apps, and scenarios have no policy protecting them.
M365 Backup status per workload, recovery controls, and an AI-generated ransomware scenario — what would you actually lose if hit today?
Scored posture across credential protection, endpoint hardening, device management, and threat detection — powered by Intune and Defender data.
Three frameworks. One scan. Failing controls ranked by actual exposure — how many configurations are broken behind each one — not just whether something got a red label.
Every third-party app with access to your tenant, scored by permission risk. High-risk permissions (Mail.ReadWrite, Files.ReadWrite.All) flagged immediately.
AI assessment of your identity governance health — PIM standing access, access reviews, entitlement management, and guest risk.
AI synthesis of your full Microsoft Defender posture — Secure Score, XDR incidents, Safe Attachments, Safe Links, and endpoint protection.
Per-admin risk scoring across MFA registration, PIM eligibility, on-premises sync status, and last sign-in — ordered by who needs attention first.
Every guest account scored by risk — never signed in, stale 90+ days, external domain. Sorted highest risk first.
CA governance score, PIM analysis, at-risk users, per-method MFA breakdown, and stale account detection.
Device compliance, WUfB update rings, BYOD & MAM coverage, config profile gaps, and an AI scenario for what happens if a device is lost today.
Active user counts for Teams, SharePoint, OneDrive, Exchange, and Viva Engage vs your licensed seats — broken down by department.
AI action plans for workloads with low adoption — root cause, three concrete steps with effort ratings, admin centre paths, and expected outcome.
Identifies configuration patterns that cause users to find workarounds — and tells you what those workarounds probably are.
Detects active organisational transitions and positions them in the ADKAR change model with recommended interventions.
A sequenced, dependency-mapped adoption plan built from your scan data — three phases with effort ratings and admin centre links for every step.
Checks every Microsoft 365 Copilot and Agent 365 prerequisite before you roll out Copilot, agents, or Cowork.
Your Copilot tier, per-app adoption, Copilot ROI — cost per active user and monthly wasted spend in GBP — Agent 365 readiness score, and Cowork eligibility.
Adoption grade (A–F) per Viva workload — Engage, Learning, Connections, Amplify, Goals, and Loop — with AI-generated insights and recommended actions.
Every SharePoint site — last activity, file count, storage. Abandoned sites surfaced immediately. AI governance assessment with risk level and recommendations.
Every Microsoft Teams in your tenant — owner status, visibility, age, and risk flags. No-owner and abandoned teams surfaced immediately.
AI assessment of your Teams Phone deployment — voice policy, PSTN calling, meeting recording governance, and guest access.
Named users. Last sign-in date. Monthly cost. If someone hasn't signed in for 90 days and they're still licensed, this is where you find them.
What you're actually paying per person who signs in — per SKU. Turns your licence invoice into a decision metric.
Ask what-if config questions and get licensing guidance — what to buy, per-user vs tenant-wide requirements. Grounded in your active licences and scan data.
When renewal is within 90 days, AI generates a full briefing — what to drop (with savings), what to add, and a ready-to-send partner brief.
Crosses your licence plan against the M365 feature registry to show features you already own but have not switched on.
Identifies users assigned Microsoft 365 licences who have never activated a single app — the clearest signal of wasted spend before renewal.
90 days of Microsoft Message Centre announcements filtered to your plan — AI-categorised by impact, with plain-English actions. Refreshes every 24 hours.
Back after a few days? A card shows exactly what changed since your last visit — what improved, what slipped, how your score moved.
Health score sparkline on Overview — see improvement or decline at a glance. Fixed Since Last Scan shows which features moved and the score delta.
Why did your score change? AI explanation of exactly which features improved or degraded between scans, grouped by category.
Generate a read-only public link to your results — share with your IT director or a client without them needing an account.
Schedule scans daily, weekly, or monthly. When something changes, an AI email tells you what — delivered to your inbox.
AI assessment of your external sharing risk — six key settings, risk level, plain-English narrative, and effort-rated recommended actions.
AI synthesis of your Teams governance data — abandoned teams, no-owner teams, public visibility risks, and guest access exposure.
Compare all client tenants side by side — health score rankings, vs-average delta, and feature-level breakdown of commonly failing controls.
One dashboard across all client tenants — AI risk ranking, per-client health alerts, cross-tenant patterns, and natural language portfolio queries.
The Multi-Tenant plan gives you a portfolio view across all your client M365 tenants — health scores, open issues, and scan schedules at a glance. Get alerted when configurations drift.
We request read-only Microsoft Graph scopes. We can never modify your tenant, send emails, or access user content.
All Microsoft OAuth tokens are AES-256-GCM encrypted before storage. Encrypted in transit with TLS 1.3.
All data stored in Cloudflare D1 Amsterdam (WEUR). No data leaves the EU. UK GDPR compliant.
Every login, scan, and action is logged. Export your full data or delete your account at any time.
No contracts. Cancel anytime in the billing portal.
See your full M365 configuration — what is on, what is off, and where the gaps are.
AI-powered fix guides, automated monitoring, and full visibility for your tenant.
For MSPs and IT consultants managing multiple client tenants.
Start Multi-TenantAlready have an MSP account? Sign in →
All plans billed monthly. Billing FAQ →
Cost per active user, monthly wasted spend in GBP, and a colour-coded ROI signal — see whether your Copilot investment is justified.
MSP · AI FeaturesAsk plain-English questions across all your client tenants — "which clients have MFA issues?" Answers draw only from your own portfolio data.
AI Features · RemediationStep-by-step remediation guides built from your tenant data, with a built-in AI assistant for when you get stuck on a specific step.
Common questions before connecting your first tenant.
Feature questions, billing, and how-tos
Everything about specific features — Copilot & AI, Workload Adoption, Unlocked but Unused, licence waste, scheduled scans, SLA tracking, MSP portfolio — is in the Help Centre.
See your full M365 feature picture in 30 seconds. No agent, no install, no credit card.
Read-only access · Data stored in EU (Amsterdam) · Delete anytime
Already a member?