Add a client tenant using the sidebar, then click Run Scan to pull live compliance data from Microsoft Graph.
Add Client Tenant
Before adding: Run Setup-CMMCScannerApp.ps1 in the target tenant as Global Admin. It creates the Entra app and outputs the three IDs needed here. All Graph permissions are read-only — the scanner cannot modify anything.
Optional: Sentinel Scan — Fill the fields below to scan your Microsoft Sentinel workspace for analytics rules, data connectors, and incidents. Requires Microsoft Sentinel Reader RBAC role assigned to this app registration in Azure Portal → Subscriptions → IAM.