Entra ID Hygiene Scorecard

Assess the operational hygiene of your Microsoft Entra ID directory across account lifecycle, guest management, application registrations, group strategy, and directory maturity.

Account Lifecycle

How are stale and unused accounts managed?

Stale account threshold (days of inactivity)

Action taken on stale accounts

Guest & External Access

How are guest accounts governed?

Approximate guest account count

Guest access reviews in place?

Application Hygiene

How are app registrations and consent managed?

App consent policy

Approximate app registration count

Orphaned apps (no owner / unused) managed?

Group Management

How are Microsoft 365 and security groups governed?

Group naming policy enforced?

Dynamic groups in use?

Self-service group management

Directory Maturity

Advanced directory governance capabilities.

Are directory roles reviewed regularly?

Custom security attributes in use?