Sample report · illustrative data · this is exactly what you receive, free, per tenant

What you get: a full AI Identity Risk Report.

Register free and run this on any client's Microsoft 365 tenant. The report below is a redacted sample, the full version is yours to generate and share, branded as your MSP.

AI Identity Risk Report

Meridian Global Ltd

Tenant: meridian.onmicrosoft.com · 480 seats
Generated: 29 Jun 2026 · Read-only scan via Microsoft Graph
Report ID: AIRM-RPT-2026-0488 (sample)
Your MSP logo
Prepared by your MSP
White-labelled at Enterprise tier
1 · Executive summary
61/100
Elevated risk
Peer average (similar orgs): 67
1,284
AI & non-human identities discovered
23
Over-privileged identities
146
Dormant / unused > 90 days
38
AI agents (Copilot & third-party)
9
Identities with no owner
5
Frameworks with open gaps
2 · AI identity inventory (top risks)

Every AI agent, service principal, app and automation identity, scored. Full inventory of 1,284 in the live report.

IdentityTypeCan accessOwnerRisk
OpenAI-Connector (3rd-party)OAuth appMail, Files (all sites)NoneCritical
Copilot-Studio-Agent-04AI agentSharePoint, Dataversej.okaforHigh
sp-finance-automationSvc principalFinance site, Graph writeNoneHigh
n8n-workflow-prodAutomationUsers.ReadWrite.AllitopsMedium
Copilot (M365, tenant)AI agentPer-user groundingMicrosoftLow
3 · Key findings

A third-party AI connector can read all mail and files, and has no owner.

"OpenAI-Connector" holds tenant-wide Mail.Read and Files.Read.All granted 7 months ago; no business owner recorded. Highest-priority remediation.

23 identities are over-privileged for their actual usage.

Permissions far exceed observed activity, classic blast-radius exposure if any are compromised.

146 non-human identities are dormant.

Unused >90 days but still hold live permissions, candidates for review and removal.

4 · Recommended actions

Prioritised remediation, generated automatically. Execution runs on an AIRM subscription, the free report shows you exactly what to do.

Revoke Mail/Files scopes on "OpenAI-Connector" & assign an ownerCritical · reduces blast radius immediately
▶ Execute · on subscription
Right-size permissions on 23 over-privileged identitiesHigh · least-privilege remediation queue
▶ Execute · on subscription
Review & disable 146 dormant identitiesMedium · bulk triage with rollback
▶ Execute · on subscription
Turn on continuous monitoring & weekly change alertsKeeps the score current as AI sprawl grows
▶ Enable · on subscription
5 · Governance & compliance mapping

Findings mapped to 11 frameworks. aligned · gaps · action required.

This is what every client gets, free.

Register, connect a Microsoft 365 tenant read-only, and generate this full report in minutes. Subscribe per tenant to execute the actions and keep monitoring.

Free NHI Risk Score →