Frequently asked questions about PureTenant.

The identity-based reporting dashboard for Microsoft 365 by Bauer365 GmbH. Organisations and their IT partners see at a glance which licences they hold, how they are used and where costs can be cut — plus targeted pointers on where security and governance need tightening. There is nothing to install: the tenant is connected through an administrator’s consent.

Licences and their usage, security settings, permissions and configuration — per identity, from Microsoft Graph, Defender for Endpoint and Exchange Online. This yields the five areas Licences & costs, Savings potential, Blind spots, Compliance, and Copilot & agents. Because the licences, usage and findings of an account are tied to its identity, you see in one place for each person which licences they hold, how they use them and which security findings affect their account.To the features

For everyone responsible for Microsoft 365: IT leadership and management, information security and security administration, compliance and data protection, licence management, procurement and finance, device management — and system houses that look after many tenants. All of them read their answer from the same collection, so IT, procurement and management talk about the same figures.

A zero claims a measurement. Where the measurement is missing, the value is missing too, and PureTenant names the reason — for example a report in which Microsoft conceals the names, or a permission the collection lacks. What cannot be measured is therefore shown as “not measurable”, never as zero. Only when assignment and usage are proven does it become a recommendation.To the methodology

Collection mainly needs read permissions. Writing is ConfigurationMonitoring.ReadWrite.All: Microsoft’s read permission for configuration monitoring may only list jobs, and the Teams policies only come from a snapshot that the collection creates in your tenant and removes again afterwards. Beyond that, PureTenant only changes what your administrator triggers personally at the push of a button. The token with which they approve the setup is discarded afterwards and never stored.The permissions at a glance

The application is operated in Germany. The privacy policy gives the details.

The assessment covers, among others, NIS2 (German BSIG), ISO/IEC 27001, DORA, BSI IT-Grundschutz, and GDPR Art. 32 (TOMs). Where a setting in the tenant supports a requirement, the assessment names it with evidence; what remains to be evidenced organisationally is listed per requirement. It is not a certification and does not replace an audit.To the guides

Through your IT partner. Presentation, appointment and proof of concept come from the partner or from us.For partners

The whole interface with demo data — before you connect your tenant.