Identity and access
Microsoft Entra ID accounts, multi-factor authentication (MFA), Conditional Access and administrator roles.
Microsoft 365 Environment Review
A Microsoft 365 assessment is a structured review of how your tenant is configured, governed and used. Umbrella Tech examines identity, security settings, collaboration, licensing and administration, identifies gaps and risks, and gives you a prioritised improvement plan. It suits organisations planning a migration or a Microsoft 365 Copilot rollout, and those unsure what is configured today.
When this assessment is useful
Use a Microsoft 365 health check before a migration, restructure or Microsoft 365 Copilot rollout, after a change of IT provider, or when nobody can say with confidence how the tenant is set up. A tenant can work day to day while accumulating unused services, inconsistent access and SharePoint or Teams spaces with no owner.
Assessment scope
Security configuration
Microsoft Defender settings, audit logging, Microsoft Secure Score and device management in Microsoft Intune.
Collaboration and data
SharePoint, Teams and OneDrive sharing, ownership, retention and information organisation.
Licensing and operations
Licence use, documentation and responsibilities for ongoing management.
Evidence and access
Most of the review uses read-only administrative access to your tenant. Depending on scope, evidence may include configuration exports, licence reports, existing documentation and interviews with tenant administrators. Access arrangements are agreed with your team before work starts.
Configuration exports
Licence reports
Existing documentation
Interviews with tenant administrators
Findings that lead to action
You receive a Microsoft 365 audit report with findings, evidence and prioritised recommendations across security, collaboration and administration. Each recommendation states its impact and dependencies, and the report can inform security uplift, collaboration improvements or readiness for Microsoft 365 Copilot.
Illustrative findingsExamples only
- ExampleBroad sharing links on sensitive sites
- ExampleAdministrator accounts without MFA
- ExampleShared workspace with no clear owner
These are examples of the issues a review can examine, rather than findings about your organisation.
How it runs
Assessment method
01
Confirm the scope
Agree the workloads, sites, applicable requirements and review methods. Identify exclusions and who will provide access.
02
Gather and examine evidence
Review tenant configuration, policies and usage reports. Speak with administrators and owners and validate important findings.
03
Prioritise and plan
Explain the findings and their business impact. Establish recommendations, dependencies and a practical improvement sequence.
04
Review the next steps
Walk through the findings with the responsible team. Agree what requires further investigation and what can progress to implementation.
From assessment to remediation
Agreed recommendations can move into delivery through Microsoft 365 Consulting, Microsoft 365 Security or a Microsoft 365 Copilot rollout. You can also use the roadmap with your internal team or existing provider; the implementation scope is set from the findings.
Assessment outputFindings and remediation roadmap
Umbrella TechWe deliver the improvements
DesignImplementValidate
Your organisationYour internal team
Your partnerYour existing technology provider
Frequently asked questions
Can't see your question? Ask us directly →
What does a Microsoft 365 assessment include?
A review of identity, security configuration, collaboration, licensing and administration in your tenant, followed by a findings report and a prioritised improvement plan. The areas are agreed before work starts.
What evidence and access are required?
Read-only administrative access to the tenant, plus any existing documentation and time with the people who administer it. We agree the access method with you before the review begins.
Will the review change our tenant?
No. The review establishes the current state. Any configuration changes are agreed separately, with a defined implementation scope and approval process.
How long does the assessment take, and what does it cost?
Both depend on the size of the tenant, the number of workloads in scope and how quickly access and interviews can be arranged. Scope, timing and cost are confirmed in discovery, before the review starts.
What happens after the assessment?
We walk through the findings with your team and agree priorities. You can engage us to deliver the changes, use the roadmap with your own team or provider, or plan a follow-up review.
Establish your current position
Tell us what your Microsoft environment needs to do better, and we will scope the change.