ShareGate Protect is a Microsoft 365 governance solution that provides a clear view of your tenant, allowing you to see who has access to what, identify risky sharing and permissions, and take action to resolve issues all in one place.
It also provides insights and recommendations to help you continually improve your governance, reduce risk, and maintain a secure and well-managed environment.
Note: ShareGate Protect doesn't support multi-geo tenants. If your tenant uses Microsoft 365 Multi-Geo, Protect will only display data from the main geo environment.
Prerequisites
Subscription
To access ShareGate Protect, you need to be a member of a ShareGate workspace with an active ShareGate Protect subscription and access to the product.
Permissions
A global or privileged role admin must once consent to a set of Microsoft 365 permissions to allow ShareGate Protect to read their tenant, and another set if they wish to have access to remediation actions, such as changing a Microsoft 365 workspace's privacy and owners.
To review these permission sets, see Microsoft 365 permission sets required for ShareGate.
Note: The app is registered under Workleap, its parent company.
Access
Once consent is provided for your tenant, access to Protect is managed by ShareGate workspace admins in the workspace's settings.
To learn more, see Manage access to ShareGate.
Running ShareGate Protect
You can access ShareGate Protect in ShareGate Home.
If this is your first time connecting to your tenant in ShareGate Protect, you'll be prompted to consent to a set of Microsoft 365 permissions.
If you are a global or privileged role admin on the tenant, you can grant consent to our Enterprise app yourself. If you do not have sufficient permissions to grant consent yourself, you can use the Request approval link when prompted.
After consent is granted, ShareGate Protect automatically starts analyzing your tenant.
Note: After the initial scan, ShareGate Protect automatically updates your Microsoft 365 data. Most of the data is refreshed every 24 hours, and not all the data is refreshed at the same time.
For large tenants with a high volume of sharing links, the sharing links crawl may take longer than 24 hours to complete. In complex environments with many sharing links, this can take more than a week.
ShareGate Protect pages
Overview
Discover your tenant
A simplified card view of the quantity of different Microsoft 365 workspaces your tenant contains, such as Teams and SharePoint sites, in your environment.
Click on one of the cards to access a pre-made report for that specific workspace.
Governance Insights
A summary of your tenant's governance health, organized into four categories: Reduce costs, Prevent oversharing, Control sprawl, and Improve Copilot results. Each category card shows your top active insights and, where applicable, your potential monthly savings.
Click a category card to open the Insights page filtered to that category. You can also select View all insights to see everything at once.
Remediation impact
Track the governance actions you've taken in ShareGate Protect and see how your tenant's risk has changed over a selected time period. Use the dropdown to adjust the time window (the default is Last 30 days).
Each tile shows what was resolved (secured, removed, or reclaimed) versus the current total, along with a trend percentage. Click the resolved count to open the Activity log filtered to those specific actions.
For more details, see Remediation impact in ShareGate Protect.
Tenant info
This page compiles useful information about your tenant's users, sharing, permissions, and other relevant details. You can click on most elements to gain even more information, such as Potential risk and Suggestions.
High-level inventory
High-level inventory gives you information about your tenant at a glance, such as:
Content and storage: The number of workspaces and how much storage some of them take.
Users: The total number of user accounts in your tenant and a graph view that shows how they are spread between Members and Guests.
Licences: The total number of different types of licenses, how many are assigned, and information about Copilot eligibility. You can select Export full license view to export the information as a CSV.
User groups: The total number of Security and Dynamic groups in your tenant.
Oversharing and security
Oversharing and security gives you insight into how data is shared and controlled across your tenant and includes:
Sharing links: The different types of sharing links used on your tenant and how many of them are used. You can click on a link type to open a pre-made report that displays all these links. If you have access to use remediation actions, you can delete any of these links with the 3 dots menu buttons directly in the report.
Organization-level sharing settings: The tenant-level sharing settings for SharePoint and OneDrive for Business
Broad permissions: Some workspace permissions at a glance. Clicking on the boxes will grant you access to a pre-made report with details about them or insight into how they affect your environment.
Guest access: The number of Microsoft 365 groups with guests. Click on the box to open a pre-made report of all these groups.
Sensitivity labels: Information about your sensitivity labels and their settings. Click on the boxes for more information and context.
Data sprawl and lifecycle
Details about inactive workspaces and inactive users with P1/P2 licenses. Click on the boxes to access a pre-made report or insight into how they impact your environment.
Click View configuration to review the Group expiration settings for the tenant in the Entra Admin Center.
Insights
A full list of your tenant's governance insights, organized into four categories: Reduce costs, Prevent oversharing, Control sprawl, and Improve Copilot results. Use the filter tabs at the top to focus on a specific category.
Click any insight to see how it affects your environment and review the trend graph. Select the Object list tab to view all Microsoft 365 objects involved.
Reporting
You can create reports that list SharePoint sites, Microsoft 365 groups, OneDrives, Sharing Links, and Users, or you can review your Microsoft 365 environment from one of the pre-made reports available.
You can also describe what you want in plain language and let ShareGate Protect automatically generate a report for you with AI.
To learn about ShareGate Protect reports, see Reporting overview.