Connect your tenant
One consent click by a Global Administrator. serv365 reads your configuration — read-only, app-only — and starts answering the question that matters: does this Microsoft change affect us?
What happens when you connect
- Your tenant's configuration is scanned daily — Entra, SharePoint & OneDrive settings out of the box.
- Every policy and setting is profiled; any drift from one day to the next is recorded with before/after evidence.
- You get a private dashboard link (shown once, right after consent).
Exactly what we ask for — nothing else
| Permission | What it is | Why we need it |
|---|---|---|
| ServiceMessage.Read.All | Read Message Center announcements | Correlate changes against your tenant |
| ServiceHealth.Read.All | Read service health | Track incidents affecting you |
| Policy.Read.All | Read policy configuration | Conditional Access, authorization, authentication methods |
| SharePointTenantSettings.Read.All | Read SharePoint/OneDrive settings | Sharing defaults and tenant settings |
| Directory.Read.All | Read directory configuration | Group settings, domains, organization profile |
| Organization.Read.All | Read organization info | Required by Teams PowerShell |
| Exchange.ManageAsApp | App-only Exchange access | Read Exchange configuration (read-only role assigned by you) |
Everything is read-only. We never request write access to your tenant, and you can revoke the whole grant at any time in Entra → Enterprise applications → serv365 Watchdog.
You'll sign in at login.microsoftonline.com and see Microsoft's standard tenant-wide consent screen listing these permissions.