Inventory Intelligence For Microsoft 365

Penthara Discovery

One-click discovery of your Microsoft 365 inventory.

Identity, licences, mailboxes, sites, Teams and secure score - collected in minutes and turned into insights your business can act on. Run the segments you need, at the depth you choose, and export the workbook.

Read-only · No agents · Four named Graph scopes

Contoso · Microsoft 365 Production

Run 2026-07-24 14:07 · Advanced

Completed

1,284

Licensed Users

274

Inactive 60+ Days

47

Guest Accounts

1,190

Mailboxes

214

Site Collections

14 TB

SharePoint Storage

96

Teams

12

Privileged Roles

215

Enterprise Apps

Secure ScoreCaptured this run

68/ 100

  1. 01

    Connect

    Grant read-only consent. Nothing to deploy, nothing changed in your environment.

  2. 02

    Run discovery

    Pick the segments and how deep to go. Progress arrives live, dataset by dataset.

  3. 03

    Decide

    Insights on screen, an Excel workbook to send on, and a dated snapshot kept for every run.

Overview

Turn your Microsoft 365 estate into a business decision

Discovery reads your Microsoft 365 environment through the Graph API and returns a complete inventory: every account, licence, mailbox, site, team, plan and connected application, together with the security posture around them.

Nothing is deployed and nothing is changed. One read-only consent activates the environment, and every run is kept as a dated snapshot you can come back to.

Challenges

Five challenges that turn into a project

Pick one to see the data Discovery puts behind it.

Do you really know what is going on across your Microsoft 365?

Users, licences, mailboxes, sites and Teams each live in their own admin center. Getting a straight answer means logging into several of them and piecing it together yourself.

Full visibility, without the back and forth

What Discovery gives you
  • Users, licences, mailboxes, sites, Teams and security settings in one place
  • No jumping between the Microsoft 365 admin center, Entra, SharePoint and Exchange
  • A clear, current picture of your whole environment, ready whenever you need it

Recognise any of these? One run answers all five.

Read-only, no agents, and your first set of insights in minutes.

Segments

Multiple segments. Run the ones you need.

Discovery is divided into segments, each with its own datasets and depth. Take the whole inventory, or just the service in question this week.

Inventory Overview

The shape of the environment itself - what is subscribed, which domains are yours, and which controls are switched on.

Access

Basic tier is covered by the one-click baseline consent. Advanced adds Conditional Access and app consents through a connector.

What Discovery collects
  • Organisation profile
  • Verified domains
  • Subscribed SKUs
  • Enterprise applications
  • Directory roles
  • Security defaults
  • Secure score
  • Conditional Access
  • App consents
Access model

Least privilege, and we name every permission

Discovery starts on four read-only permissions. Anything deeper is something you grant deliberately, per service, through an app you own.

BaselineOne click

Consent once, read-only

An admin grants read consent to our shared Microsoft application. No app registration, no credential, nothing to deploy - and that grant is what activates the environment. These are the only four permissions requested:

  • Organization.Read.All
  • Directory.Read.All
  • User.Read.All
  • Policy.Read.All

Covers the basic tier of Inventory Overview and Identity - enough for users, licences, groups, domains, roles and security defaults.

AdvancedYour app, your key

Deeper data, on your terms

For advanced tiers you create a connector: an application in your own directory that declares only the permissions beyond baseline - never the ones you already granted.

  • Scoped globally, to one segment, or to a set you choose
  • Validated before it is saved, so a misconfigured grant fails on setup rather than mid-run
  • Credential held in your key vault, never written to our database

SharePoint and Exchange sit outside the baseline entirely, so they need a connector at every tier - and a certificate for their advanced tiers, because Microsoft will not issue those tokens any other way.

Comparison

Same data. Better answers.

Everything below is possible natively - if you have the time, the scripts and the person who knows both.

Time to discovery

2-3 days30 minutes

Everything in one place

6 portals1 page

Effortless setup

Writing scriptsOne click

Select a row for detailNative Microsoft 365 admin centerPenthara Discovery
EffortNative: 2-3 daysDiscovery: Under 30 minutes

A complete picture means Entra, Exchange, SharePoint, Teams and licensing, each in its own portal with its own export format. Discovery collects all of them in a single run - 100,000 users in under 30 minutes - and presents them as one page you can scroll.

Discovery reads Microsoft 365 through the Graph API. It complements the admin center - it does not replace your controls.

Pricing

The free plan is the whole product.

Not a trial, not a teaser. All segments at full depth, free under 300 licensed users. Advanced adds export, reporting and five years of history.

In every plan, including the free one

No segment is held back and no record is hidden.

  • Tenant overview and licensing
  • SharePoint sites and sharing
  • Teams, channels and apps
  • Power BI workspaces
  • Entity-level records, not just counts
  • A sync every day
  • Identity, groups and roles
  • Exchange mailboxes and rules
  • Planner plans and tasks
  • Power Platform environments
  • Search, filter and saved views
  • Read-only access to your tenant

What Advanced adds

Five reasons teams move up.

  • Export anything you see

    Every table and every view leaves as CSV, Excel or PDF.

  • Report templates

    Prepared reports for licence reviews, access audits and cleanup work.

  • Five-year delta

    Compare any two dates - who was added, what changed, what disappeared. Baseline compares within 30 days.

  • Five years of history

    Your discovered data is kept for five years from onboarding, against one year on Baseline.

  • Room to grow

    Tiers to 5,000 licensed users, and custom pricing beyond that.

Your licensed users300Guests and unlicensed accounts are not counted.
1003001,0005,000More than 5,000
Advanced

Advanced

Up to 300 licensed users

$999

$499/year

Limited time offer

  • Everything in Baseline
  • Export to CSV, Excel and PDF
  • Report templates
  • Five-year delta and history
  • 7 days free with a payment profile
Advanced

Enterprise

More than 5,000 licensed users

Custom

Priced on your tenant size

  • Everything in Advanced
  • Volume pricing above 5,000 users
  • Five-year delta and history
  • Named onboarding contact

* Limited time offer. Prices are in USD, billed annually. Onboarding is free for a limited time, normally $199.

Baseline stays free. If you are under 300 licensed users and do not need to export, it is the plan you want - not a trial of the one you want.

Add-on

Ten-year historical store

Advanced keeps five years of your discovered data. If your retention or audit obligations run longer, extend the store to ten years on any Advanced plan.

FAQ

Questions admins ask first

Read-only application permissions on Microsoft Graph, and we name all four: Organization.Read.All, Directory.Read.All, User.Read.All and Policy.Read.All. That single consent is what activates an environment. Discovery holds no write permission of any kind and never modifies anything.

Why Baseline is free

Visibility into your own environment should not be the thing you cannot afford.

We, at Penthara Technologies, work with organizations of every size, and the smaller ones are usually the ones flying blindest. Same tenant sprawl, same license waste, same compliance questions - and no team to chase any of it.

So under 300 licensed users, Discovery is free. Not a stripped tier and not a countdown to a card form. The full product, because a business that size should be spending on its people, not on finding out what it already owns.

  • Free is not a trial

    There is no clock on Baseline and no card to add. Stay on it for as long as you stay under 300 licensed users.

  • Nothing is held back

    All segments, entity-level records, a sync every day. The paid plans do not see more of your tenant than you do.

  • We charge for what costs us

    Export, reporting and years of retained history are the parts that carry real cost. That is where the price sits, and nowhere else.

  • Read-only, always

    Discovery reads your tenant through the Graph API and never writes to it. Your data is yours, on every plan.

Your trusted Microsoft Solutions Partner

Our honours

As a Microsoft Solutions Partner, we have earned recognition for our proficiency in delivering high-quality Microsoft 365 services.

Penthara Technologies is a leading Microsoft Solutions Partner, specializing in cloud computing, data analytics, AI and enterprise software. We help businesses seamlessly integrate and optimize Microsoft products to drive innovation and efficiency. Partner with us to transform your digital landscape.

  • Microsoft Solutions Partner - Data & AI, Azure
  • Microsoft Solutions Partner - Modern Work
  • Microsoft Solutions Partner - Digital & App Innovation, Azure

See what's really in your Microsoft 365

One click, read-only, no changes to your environment.