Zero Trust Assessment for Tenant Configuration
Zero Trust Assessment helps identity vulnerabilities, improve security posture, and align your environment with the best practices for data and identity protection.
Prerequisites
- Global Administrator role to connect and consent to the required permission for the first time
- Uninstall previous version of Zero Trust Assessment
Install a module Zero Trust Assessment
Update help using cmdlet 'update-help'
Connect to Microsoft Graph and Microsoft Azure
Admin consent is required to connect-ZTAssessment
Run the Zero Trust Assessment
The report and the export folder contain sensitive tenant information that threat actors might use to their advantage. Share the report and folder only with authorized personnel in your organization.
Review the Report
Important
I am not describing in detail what the report presents — you can read about that on the official Microsoft website.
https://learn.microsoft.com/en-us/security/zero-trust/assessment/get-started
The key point is that the report does not generate any magical, automatic fixes.
It presents only strict data based on best-practice recommendations. However, your company’s policy may differ. Therefore, a “Fail” result does not necessarily mean that something must be fixed immediately — in many cases, it is simply aligned with the organization’s internal policies.
Website created in the creator WebWave