Skip to main content
The common uses are a security review or QBR, where the agent reports a client’s Microsoft Secure Score and the actions that would raise it, how far the client drifts from your baseline, and Inforcer’s own reports, and a ticket about a client’s Microsoft 365, where it checks how a policy or a user is set in Inforcer’s backup.
Automatically enabled when you configure Inforcer permissions in your agent workflow.

​
What It Does

  • Read a client’s Microsoft Secure Score: the current and maximum score, 90 days of history, scores by category, and each improvement action with its gap and remediation steps
  • Read alignment scores against your baselines, and one client’s policy-by-policy comparison with its baseline
  • Read a client’s backed-up Microsoft 365, Intune and Entra policies, its users (licenses, MFA registration, admin roles), groups with members, and directory roles
  • Run an Inforcer assessment for a client and read its compliance results
  • Queue Inforcer report runs, read CSV, JSON and HTML outputs, and attach a PDF output to the ticket
  • Read Inforcer’s own activity log
Neither a report run nor an assessment changes anything in a client’s Microsoft 365.

​
Permission Groups

​
Access Profiles

​
Safety Controls