TenantLens
0.3.0
Read-only Entra ID / Microsoft 365 tenant assessment, documentation and drift detection. Exports versionable snapshots via Microsoft Graph, generates human-readable documentation and self-contained offline HTML reports, evaluates a data-driven best-practice rule catalog and detects drift between snapshots.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
(c) 2026 Flurin Gubler. All rights reserved.
Package Details
Author(s)
- Flurin Gubler
Tags
EntraID AzureAD Microsoft365 M365 ConditionalAccess Security Assessment Audit Documentation Drift MicrosoftGraph MSP Windows Linux MacOS
Functions
Connect-TenantLens Disconnect-TenantLens Invoke-TenantLens Invoke-TenantLensSnapshot Compare-TenantLensSnapshot Test-TenantLens Get-TenantLensRule New-TenantLensReport New-TenantLensDocumentation
PSEditions
Dependencies
-
- Microsoft.Graph.Authentication (>= 2.0.0)
Release Notes
https://github.com/xGreeny/tenant-lens/blob/main/CHANGELOG.md
FileList
- TenantLens.nuspec
- Private\Format-TLDocumentation.ps1
- Private\Write-TLManifest.ps1
- Rules\CA-004.no-stale-report-only.psd1
- TenantLens.psd1
- Private\Get-TLCollector.ps1
- Public\Compare-TenantLensSnapshot.ps1
- Rules\CA-005.break-glass-excluded.psd1
- TenantLens.psm1
- Private\Get-TLDefaultScope.ps1
- Public\Connect-TenantLens.ps1
- Rules\CA-006.compliant-device-or-mfa.psd1
- Collectors\AuthMethods.ps1
- Private\Get-TLDriftSeverity.ps1
- Public\Disconnect-TenantLens.ps1
- Rules\ID-001.global-admin-count.psd1
- Collectors\AuthorizationPolicy.ps1
- Private\Get-TLRuleDefinition.ps1
- Public\Get-TenantLensRule.ps1
- Rules\ID-002.pim-over-permanent.psd1
- Collectors\ConditionalAccess.ps1
- Private\Get-TLScoreWeight.ps1
- Public\Invoke-TenantLens.ps1
- Rules\ID-003.security-defaults-coherence.psd1
- Collectors\EmailAuthDns.ps1
- Private\Invoke-TLGraphRequest.ps1
- Public\Invoke-TenantLensSnapshot.ps1
- Rules\ID-004.guest-invites-restricted.psd1
- Collectors\NamedLocations.ps1
- Private\New-TLRuleResult.ps1
- Public\New-TenantLensDocumentation.ps1
- Rules\ID-005.user-consent-restricted.psd1
- Collectors\RoleAssignments.ps1
- Private\Protect-TLSnapshot.ps1
- Public\New-TenantLensReport.ps1
- Rules\ID-006.guest-access-restricted.psd1
- Collectors\TenantBasics.ps1
- Private\Read-TLSnapshot.ps1
- Public\Test-TenantLens.ps1
- Rules\MAIL-001.spf-configured.psd1
- Config\volatile-properties.psd1
- Private\Resolve-TLAppId.ps1
- Rules\AUTH-001.weak-methods-disabled.psd1
- Rules\MAIL-002.dkim-enabled.psd1
- Private\Compare-TLValue.ps1
- Private\Resolve-TLDnsRecord.ps1
- Rules\CA-001.legacy-auth-blocked.psd1
- Rules\MAIL-003.dmarc-enforced.psd1
- Private\ConvertTo-TLHtml.ps1
- Private\Resolve-TLObjectId.ps1
- Rules\CA-002.mfa-for-admins.psd1
- Templates\drift.html
- Private\ConvertTo-TLNormalizedObject.ps1
- Private\Write-TLFile.ps1
- Rules\CA-003.mfa-for-all-users.psd1
- Templates\report.html