ShareGate Protect is a Microsoft 365 governance solution that provides a clear view of your tenant, allowing you to see who has access to what, identify risky sharing and permissions, and take action to resolve issues all in one place.
It also provides insights and recommendations to help you continually improve your governance, reduce risk, and maintain a secure and well-managed environment.
Prerequisites
Subscription
To access ShareGate Protect, you need a ShareGate Protect subscription.
Permissions
A global or privileged role admin must once consent to a set of Microsoft 365 permissions to allow ShareGate Protect to read their tenant, and another set if they wish to have access to remediation actions, such as changing a Microsoft 365 workspace's privacy and owners.
To review these permission sets, see Microsoft 365 permission sets required for ShareGate.
The admin can then grant access to any user through an Assessor role for ShareGate Protect in Entra ID.
Note: The app is registered under its parent company, Workleap.
Running ShareGate Protect
You can access ShareGate Protect in ShareGate Home.
If this is your first time connecting to your tenant in ShareGate Protect, you'll be prompted to request access, which you can do for yourself if you are a global or privileged role admin.
After access is granted, ShareGate Protect automatically starts analyzing your tenant.
Note: After the initial scan, ShareGate Protect automatically updates your Microsoft 365 data. Most of the data is refreshed every 24 hours, and not all the data is refreshed at the same time.
ShareGate Protect pages
Overview
Discover your tenant
A simplified card view of the quantity of different Microsoft 365 workspaces your tenant contains, such as Teams and SharePoint sites, in your environment.
Click on one of the cards to access a pre-made report for that specific workspace.
Governance Insights
A list of preselected insights with basic information, with impact and category tags to identify areas of your tenant's governance that can be improved.
You can click on any insight card to learn how it affects your environment and review the insight trend graph.
You can select View all insights to access the Insights page for even more insight into your Tenant's governance.
Remediation impact
This feature is currently under development and is not yet available. When it launches, it will help you track the progress of remediation actions.
Tenant info
This page compiles useful information about your tenant's users, sharing, permissions, and other relevant details. You can click on most elements to gain even more information, such as Potential risk and Suggestions.
High-level inventory
High-level inventory gives you information about your tenant at a glance, such as:
Content and storage: The number of workspaces and how much storage some of them take.
Users: The total number of user accounts in your tenant and a graph view that shows how they are spread between Members and Guests.
Licences: The total number of different types of licenses, how many are assigned, and information about Copilot eligibility. You can select Export full license view to export the information as a CSV.
User groups: The total number of Security and Dynamic groups in your tenant.
Oversharing and security
Oversharing and security gives you insight into how data is shared and controlled across your tenant and includes:
Sharing links: The different types of sharing links used on your tenant and how many of them are used. You can click on a link type to open a pre-made report that displays all these links. If you have access to use remediation actions, you can delete any of these links with the 3 dots menu buttons directly in the report.
Organization-level sharing settings: The tenant-level sharing settings for SharePoint and OneDrive for Business
Broad permissions: Some workspace permissions at a glance. Clicking on the boxes will grant you access to a pre-made report with details about them or insight into how they affect your environment.
Guest access: The number of Microsoft 365 groups with guests. Click on the box to open a pre-made report of all these groups.
Sensitivity labels: Information about your sensitivity labels and their settings. Click on the boxes for more information and context.
Data sprawl and lifecycle
Details about inactive workspaces or users. Click on the boxes to access a pre-made report or insight into how they impact your environment.
Click View configuration to review the Group expiration settings in the Entra Admin Center for the tenant.
Insights
A list of insights with basic information, which are divided into two categories: Cost and Security.
Insights are in order of impact. You can hover over the icon that precedes each insight to reveal whether it has High (red icon), Medium (orange icon), or Low impact (green icon).
You can click on any insight card to learn how it affects your environment and review the insight trend graph. Then select the Object list tab to review a list of all the Microsoft 365 objects concerned.
Reporting
You can create reports that list SharePoint sites, Microsoft 365 groups, OneDrives, Sharing Links, and Users, or you can review your Microsoft 365 environment from one of the pre-made reports available.
To learn more about a few of ShareGate Protect's key reports, see the Key reports section.