Explorer
Every answer, rule, chapter, tool and analysis on this platform, connected. Follow the links between them: each one says why the next step is useful.
Topic Microsoft 365 1
Delegated vs application identity in Microsoft 365 evidence
- Field Guide Chapter 4: Making and defending a recommendationHow facts like this one become a defensible recommendation.
Topic PowerShell 1
How to authenticate PnP.PowerShell with a ClientId
- Tools Microsoft 365 Governance as CodeRunning the governance collectors starts with exactly this connection.
Topic Governance 2
How provenance changes what a governance finding means
- Governance SPO-ACTIVITY-001: No person has changed anything on this site for over a yearThis checker evaluates the fact against collected tenant evidence.
- Field Guide Chapter 4: Making and defending a recommendationHow facts like this one become a defensible recommendation.
Why incomplete evidence does not always mean unknown
- Governance SPO-SITE-001: A site should have at least two ownersThis checker evaluates the fact against collected tenant evidence.
- Field Guide Chapter 4: Making and defending a recommendationHow facts like this one become a defensible recommendation.
Governance rules 16
SPO-ACTIVITY-001: No person has changed anything on this site for over a year
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How provenance changes what a governance finding meansThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to inspect locked and archived SharePoint sitesThis checker evaluates the fact against collected tenant evidence.
- Knowledge LastItemModifiedDate vs LastItemUserModifiedDate in SharePointThis checker evaluates the fact against collected tenant evidence.
SPO-CLASS-001: This site carries no sensitivity label and no classification
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to read the sensitivity label and classification of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-CLASS-002: This site carries a sensitivity label that could not be resolved to a name
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to read the sensitivity label and classification of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-CLASS-003: This group-connected site carries no sensitivity label
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to detect Microsoft 365 group-connected SharePoint sitesThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to read the sensitivity label and classification of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-LIST-001: A list or library past 100,000 items can no longer have its permission inheritance broken
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to find SharePoint lists with unique permissionsThis checker evaluates the fact against collected tenant evidence.
SPO-LIST-002: A list or library may not hold more than 50,000 unique permission scopes
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to find SharePoint lists with unique permissionsThis checker evaluates the fact against collected tenant evidence.
SPO-LIST-003: A list or library above 5,000 unique permission scopes is past the recommended limit
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to find SharePoint lists with unique permissionsThis checker evaluates the fact against collected tenant evidence.
SPO-MODERN-001: The classic publishing infrastructure is enabled on this site
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to detect classic publishing features on a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to enumerate modern pages on a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-MODERN-003: The site uses a master page other than the ones SharePoint provides
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to detect a custom master page on a SharePoint site, correctlyThis checker evaluates the fact against collected tenant evidence.
SPO-MODERN-004: The site loads an alternate stylesheet into every page
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to inspect the alternate CSS of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-SHARE-001: A site that allows Anyone links permits access that cannot be attributed
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to read the sharing capability of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-SHARE-002: The default sharing link should not be Anyone
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to read the default sharing link type of a SharePoint siteThis checker evaluates the fact against collected tenant evidence.
SPO-SITE-001: A site should have at least two owners
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge Why incomplete evidence does not always mean unknownThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to get SharePoint site collection administratorsThis checker evaluates the fact against collected tenant evidence.
SPO-SITE-002: A site should have at least one administrator who is a person
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to get SharePoint site collection administratorsThis checker evaluates the fact against collected tenant evidence.
SPO-SITE-003: A site above 90 per cent of its storage quota is close to stopping
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to enumerate every site in a SharePoint tenantThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to inspect SharePoint site storage and quotaThis checker evaluates the fact against collected tenant evidence.
SPO-SPFX-001: A solution is installed at an older version than the catalog holds
- Tools Microsoft 365 Governance as CodeThe open-source tool that evaluates this rule against collected evidence.
Cited by
- Knowledge How to enumerate SPFx components used on SharePoint pagesThis checker evaluates the fact against collected tenant evidence.
- Knowledge How to enumerate SPFx solutions in a SharePoint app catalogThis checker evaluates the fact against collected tenant evidence.
Field Guide 5
Chapter 1: Migration does not start with a tool
Chapter 2: Know your estate before you choose its future
Cited by
- Knowledge How to detect Microsoft 365 group-connected SharePoint sitesThis fact belongs in the estate inventory.
- Knowledge How to enumerate every site in a SharePoint tenantThis fact belongs in the estate inventory.
- Knowledge How to find SharePoint lists with unique permissionsThis fact belongs in the estate inventory.
- Knowledge How to get SharePoint site collection administratorsThis fact belongs in the estate inventory.
- Knowledge How to inspect locked and archived SharePoint sitesThis fact belongs in the estate inventory.
- Knowledge How to inspect SharePoint site storage and quotaThis fact belongs in the estate inventory.
- Knowledge LastItemModifiedDate vs LastItemUserModifiedDate in SharePointThis fact belongs in the estate inventory.
- Knowledge How to read the sensitivity label and classification of a SharePoint siteThis fact belongs in the estate inventory.
- Knowledge How to read the sharing capability of a SharePoint siteThis fact belongs in the estate inventory.
Chapter 3: What decides the destination
Cited by
- Knowledge How to detect classic publishing features on a SharePoint siteIt weighs on where the content should go.
- Knowledge How to detect a custom master page on a SharePoint site, correctlyIt weighs on where the content should go.
- Knowledge How to enumerate modern pages on a SharePoint siteIt weighs on where the content should go.
- Knowledge How to enumerate SPFx components used on SharePoint pagesIt weighs on where the content should go.
- Knowledge How to enumerate SPFx solutions in a SharePoint app catalogIt weighs on where the content should go.
- Knowledge How to find SharePoint lists with unique permissionsIt weighs on where the content should go.
- Knowledge How to inspect the alternate CSS of a SharePoint siteIt weighs on where the content should go.
Chapter 4: Making and defending a recommendation
- Tools SharePoint Migration Readiness ReviewWhen you want the recommendation made with you, not just explained.
Cited by
- Knowledge How provenance changes what a governance finding meansHow facts like this one become a defensible recommendation.
- Knowledge Why incomplete evidence does not always mean unknownHow facts like this one become a defensible recommendation.
- Knowledge Delegated vs application identity in Microsoft 365 evidenceHow facts like this one become a defensible recommendation.
Tools 2
Microsoft 365 Governance as Code
Cited by
- Governance SPO-ACTIVITY-001: No person has changed anything on this site for over a yearThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-CLASS-001: This site carries no sensitivity label and no classificationThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-CLASS-002: This site carries a sensitivity label that could not be resolved to a nameThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-CLASS-003: This group-connected site carries no sensitivity labelThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-LIST-001: A list or library past 100,000 items can no longer have its permission inheritance brokenThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-LIST-002: A list or library may not hold more than 50,000 unique permission scopesThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-LIST-003: A list or library above 5,000 unique permission scopes is past the recommended limitThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-MODERN-001: The classic publishing infrastructure is enabled on this siteThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-MODERN-003: The site uses a master page other than the ones SharePoint providesThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-MODERN-004: The site loads an alternate stylesheet into every pageThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SHARE-001: A site that allows Anyone links permits access that cannot be attributedThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SHARE-002: The default sharing link should not be AnyoneThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SITE-001: A site should have at least two ownersThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SITE-002: A site should have at least one administrator who is a personThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SITE-003: A site above 90 per cent of its storage quota is close to stoppingThe open-source tool that evaluates this rule against collected evidence.
- Governance SPO-SPFX-001: A solution is installed at an older version than the catalog holdsThe open-source tool that evaluates this rule against collected evidence.
- Knowledge How to authenticate PnP.PowerShell with a ClientIdRunning the governance collectors starts with exactly this connection.
SharePoint Compass
Cited by
- Knowledge How to detect classic publishing features on a SharePoint siteA structured two-minute assessment of where the estate stands.
- Knowledge How to detect a custom master page on a SharePoint site, correctlyA structured two-minute assessment of where the estate stands.
- Knowledge How to enumerate modern pages on a SharePoint siteA structured two-minute assessment of where the estate stands.
- Knowledge How to enumerate every site in a SharePoint tenantA structured two-minute assessment of where the estate stands.
Analysis 21
A Copilot agent manifest is a security boundary. Here is the linter for it.
A cookie banner you can prove, with Azure Tables and Functions
AI solved syntax. It did not solve judgement.
Agents decide. Code executes. Knowing the line is the job.
Can your AI assistant read documents the user cannot see?
Developing for SharePoint Server Subscription Edition: the practices that hold up
Migrating SharePoint 2016 and 2019 to Subscription Edition: the scripts
Migrating SharePoint without stopping the business
One agent is an integration. A hundred is a governance problem.
P7CO® EcoResupply: why a certification is worth more than a promise
Refúgio da Azinheira: the arithmetic of direct booking
SPFx 1.23.2: upgrading is not changing a number
Cited by
- Knowledge How to enumerate SPFx solutions in a SharePoint app catalogThe engineering analysis behind this answer.
SPFx before version 1.0: our web parts in the official Microsoft samples
Sending email from an application, without a single password
SharePoint 2016, 2019, Subscription Edition and Online: what actually changes
The state of SharePoint in 2026: what is gone, what is current, and what to build on
The three decisions you make before moving to Azure
We are still measuring engineers by the part that got automated.
What to put in order before switching Copilot on
Why SharePoint Framework still runs on React 17
- Knowledge How to enumerate SPFx components used on SharePoint pagesThe verified command behind this analysis.
Cited by
- Knowledge How to enumerate SPFx components used on SharePoint pagesThe engineering analysis behind this answer.
Windows 10 has ended: Windows 11 is the minimum, not the plan
