TenantVigil Blog
Microsoft 365 service guides
Practical guides to running Microsoft 365 customer services: tenant work, scoped access, change plans and reports.
What a Microsoft 365 change receipt tells you
Separate the plan, approval, Microsoft response and the outcome you can verify.
Review Microsoft 365 drift against a customer baseline
Use versioned templates, drift comparisons and staged deployment to organise customer configuration work.
Run Microsoft 365 customer work from one console
A practical route from customer context to owned work, change receipts and customer reports.
Assign technicians to the customers they support
Use bounded partner roles and assigned customers to control console visibility.
A Conditional Access Baseline for Microsoft 365: Eight Policies to Review for Each Customer
The Conditional Access policies that cover most of the risk in a Microsoft 365 tenant — MFA, legacy authentication, device code flow, risk and devices — what each one does, what licence it needs, and how to review them for each customer without locking anyone out.
SharePoint and OneDrive External Sharing: The Settings to Check in Microsoft 365
The SharePoint and OneDrive sharing settings that decide who outside your company can open your files: the external sharing level, Anyone links, default link type and permission, guest resharing, allowed domains and sync from unmanaged devices.
Microsoft 365 Break-Glass Accounts: How to Set Up Emergency Access Without Weakening Security
A practical guide to emergency access (break-glass) accounts in Microsoft Entra ID: how many to create, how to protect them, how to keep them out of a Conditional Access lockout, and how to check they still work.
Maester vs. TenantVigil: Test-as-Code vs. a Managed M365 Posture Platform
Maester is a powerful open-source M365 security testing framework for engineers. Here's a balanced look at what it does brilliantly and when a managed platform serves you better.
Microsoft Secure Score vs. a Real Compliance Assessment: What the Score Doesn't Tell You
Microsoft Secure Score is a useful, free posture signal — but it isn't compliance mapping. Here's what the number does and doesn't prove, and what auditors and insurers actually want.
ScubaGear vs. TenantVigil: When a Point-in-Time M365 Scan Isn't Enough
CISA's ScubaGear is an excellent free M365 baseline scanner. Here's exactly what it does well, where it stops, and when you need continuous monitoring and compliance evidence.
Top 10 Microsoft 365 Security Misconfigurations
Ten Microsoft 365 security gaps that come up again and again in security reviews, and how to fix each one, most in under 30 minutes.
Why MSPs Need Continuous M365 Security Monitoring (Not Just Annual Audits)
An annual security audit is one snapshot of a tenant that changes every week. Here's why MSPs are switching to continuous monitoring, and how it helps client retention.
CIS Benchmark for Microsoft 365: What It Is and How to Implement It
A practical guide to understanding the CIS Microsoft 365 Foundations Benchmark and mapping its controls to your tenant configuration.
Starting with one tenant? Review its top findings for free.
Start free