Govern an estate you did not build and cannot see.
Power Platform estates are built by makers, not by projects. None of it is hidden — it is spread across four Microsoft admin APIs, each paginated, each throttled, none of which will hand you a single sentence about the whole tenant.
You cannot govern what nobody has ever listed
Apps appear in default environments, flows run on a leaver’s personal connection, premium connectors turn up in trials, and the only copy of something important is a solution somebody exported once.
Ownership
Owner and last-modified on every object, with leavers flagged where the directory no longer resolves them.
Exposure
Everyone an app is shared with and at what level, including anything shared with the entire tenant. Sharing is read live rather than from the stored assessment, because it is the figure most likely to have moved.
Credentials
The account each connection authenticates as, whether it is shared, and everything downstream that depends on it.
Licensing
Premium and custom connector reach, ranked by real usage — a licensing answer and a security answer from one list.
Sprawl
Every environment including default, trial and Teams, with Managed Environment status and what each one holds.
Reporting
Prepared governance and security views over the stored assessment, exportable to Excel, PDF, CSV and JSON.
Four of the questions, answered on a screen
Who owns this, and are they still here
Every app and flow carries its owner, and the estate carries the ones whose owner has left. An app running a finance process owned by somebody who went in March is not a governance abstraction — it is an outage with a date on it.
- Owner and last-modified on every object
- Objects whose owner no longer resolves in the directory
- Ownership concentrated in one or two people, made visible
The connections nobody remembers making
A connection is an identity. Knowing which account a production process authenticates as — and whether that account belongs to a person — is the question that decides how much of the estate is one leaver away from stopping.
- The account each connection runs as, where the API discloses it
- Health status and whether it is shared beyond its owner
- Everything downstream that would break if it went away
Premium reach, without the guesswork
Standard, premium and custom connectors ranked by real usage across the tenant. Premium reach is a licensing question and a security one, and the same list answers both.
- Usage merged from apps, flows and connections
- Licence tier per connector
- Custom connectors with the backend host they call
Every environment, including the ones you forgot
Production, sandbox, developer, trial, Teams and default. The default environment is usually the largest and the least governed, and it is the one nobody has a list of.
- Type, region and state for every environment
- Managed Environment status, so governance gaps are visible
- What each one holds, object by object
Where each one is strongest
Microsoft’s Center of Excellence Starter Kit is a free, open-source toolkit many tenants rely on, and it does things Power Insights deliberately does not. This is a plain account of which tool covers what — many teams run both.
| Capability | CoE Starter Kit | Power Insights |
|---|---|---|
| Deployment model | Solutions installed into a Dataverse environment in your tenant, with flows, tables and Power BI reports | Hosted service outside your tenant; reads through Microsoft’s admin APIs with your sign-in |
| Writes to your tenant | By design — its processes act on apps, flows and makers | Read-only by default; a few labelled actions run only when you start them |
| Several tenants from one place | One installation per tenant | Enterprise plan: several tenants on one account |
| Core inventory | Sync flows on a schedule | Assessment in minutes, refreshed on demand |
| Solutions, tables, connection references | Solutions inventoried; table and column schema is not the focus | Solution membership per object, tables with columns, references resolved |
| Search inside app packages and flow definitions | Not covered | Hardcoded URLs, SQL statements, SharePoint and Power BI references |
| DLP policy impact analysis and editor | A strength of the kit | Shows connector reach; does not model or edit DLP policies |
| Compliance requests, archival, inactivity clean-up | Governance components with maker-facing flows | Read-only — reports what is stale, does not archive it |
| Maker onboarding and nurture | Nurture components | Not covered |
| Migration dependency detection and planning | Not covered | Per-app dependencies, solution plans, hidden references, tracking |
Effort to get there, and to stay there
Typical figures, not promises — yours depend on the size of the tenant and how much of the kit you deploy.
| Aspect | CoE Starter Kit | Power Insights |
|---|---|---|
| Prerequisites | A dedicated environment with Dataverse, a service account with an admin role, Power Automate premium licensing for that account, Power BI Pro for the dashboards | An administrator account and a browser. A Dataverse security role only for solution, table and connection-reference detail |
| Initial set-up | Typically 1–3 working days for an experienced administrator; 1–2 weeks elapsed once licensing and approvals are included | About ten minutes: sign in, run the assessment |
| Time to a first complete picture | After the first full sync — several hours to a day on a large tenant | Minutes for most tenants; under an hour for the largest |
The inventory, and what you do with it
Power Insights
The standing picture: what exists, who owns it, what it connects to and what it would break. Read-only, refreshable, available the day you sign in.
- Tenant-wide inventory in minutes
- Ownership, exposure and credential visibility
- Premium connector reach
- Governance reports and exports
Power Platform governance service
The decisions: environment strategy, DLP policy, licensing position, an ALM pipeline and the maker standards that stop the estate drifting back.
- Environment strategy and DLP
- Center of Excellence set-up
- Licensing and premium connector review
- ALM pipelines and maker enablement
Start with the list.
Run a read-only assessment on your own tenant and see the ownership, exposure and premium reach you are actually governing.
Read-only · nothing installed · free plan, no card required
More on Power Insights
Every page of the Power Insights sub-site, and the way back to the rest of LogiSam.