Entra ID Hygiene Scorecard
Assess the operational hygiene of your Microsoft Entra ID directory across account lifecycle, guest management, application registrations, group strategy, and directory maturity.
About this tool
How Entra ID Hygiene Scorecard works
Answer questions on five areas: account lifecycle (how stale and unused accounts are handled), guest and external access, application hygiene, group management and directory maturity.
You get a score for each area, the top issues and recommendations to work through. A tidy directory makes every other control, from Conditional Access to access reviews, easier to trust.
Questions
Does it connect to my tenant?
Nothing. You answer questions from what you know about your tenant, or can check in the admin centres; the tool doesn't sign in to Microsoft 365 or read anything from it.
Where do my answers go?
Your answers stay in your browser and are worked out there. The site only counts, anonymously, that the tool was opened, finished or downloaded.
Related tools
Use it with
- Tenant Security Self-AssessmentScore your own Microsoft 365 tenant across eight security and compliance domains, using read-only access. For an audit of your real tenant, see Tenant Audit.
- PIM Role DesignerDesign PIM around the Trust Level Framework (TL1–TL4). Analyse who holds each admin role in your tenant today, then deploy the design with a reviewed, reversible script.
- Zero Trust ScorecardAssess your Microsoft 365 and Entra ID environment against core Zero Trust security principles.