Documentation
Assessment lifecycle and control history
What happens during a scan, how change history is recorded, and how control refreshes fit into the lifecycle.
Need a hands-on starting point?
Run a free assessment or talk to the team if you want help evaluating fit, permissions, or rollout approach.
Full assessments
A full assessment gathers tenant configuration, evaluates the full control catalog, and stores the resulting findings and evidence. Full assessments are what drive high-level dashboards, compliance reports, and the baseline change history across the tenant.
Individual control refreshes
Paid-plan tenants can refresh an individual control without waiting for the next full assessment. TenantVigil re-checks the minimum control-relevant data for that control, records the result, and appends the refresh to the control’s own history timeline.
Refresh attempts, completions, failures, and plan-based denials are recorded as control-specific events so the operator can understand not just the current state but how it changed over time.
History and auditability
Each control page can show the latest evidence, earlier assessment states, and activity events such as resolution changes or refresh runs. This makes the control page the canonical change-management view for a specific Microsoft 365 safeguard.