One place to understand the real shape of access.
AccessIQ brings together the surfaces administrators normally inspect one by one — users, security groups, applications, roles, licenses, storage, and AI insights. Instead of hunting through Entra, your team gets a coherent answer layer.
Read-only Microsoft Graph connection · SOC 2 aligned · No agents to install
Total users
2,481
+38
Guest accounts
164
6.6%
Security groups
312
+12
Unused licenses
89
$41k/yr
| User | Department | Type | State |
|---|---|---|---|
DO Dana Okonkwo dana.o@northwind.com | Engineering | Member | Active |
MR Marcus Reyes m.reyes@northwind.com | Finance | Member | Active |
PA Priya Anand priya.a@partner.io | External | Guest | Review |
TL Theo Larsen theo.l@northwind.com | Help desk | Member | Active |
Trusted by IT and security teams managing Entra at scale
The platform
Every access surface, unified into one answer layer
Readable enough for leadership and audit conversations. Detailed enough for admins and help desk teams to trust.
Users, in full context
Every account with its groups, apps, licenses, roles, sign-in activity, and MFA posture on one screen.
Security groups
Static, dynamic, and license groups — with the source of every membership made explicit.
Access matrix
See who can reach which application, and whether it's via a group or a direct assignment.
Applications
Service principals, provisioning health, and SCIM status across your whole catalog.
Licenses & cost
Surface unused seats and assignment types, then quantify the spend you can reclaim.
Directory roles
Permanent and PIM-eligible role assignments, including expiry windows.
Storage signals
Drive capacity and usage bars that flag accounts approaching their limits.
AI insights
Ask plain-language questions about access and get cited, structured answers — not guesses.
How it works
From connection to clarity in three steps
Connect read-only
Authorize a read-only Microsoft Graph connection in minutes. No agents, no writes to your tenant during evaluation.
We map the shape of access
AccessIQ correlates users, groups, apps, roles, and licenses into a single model your whole team can navigate.
Answer questions instantly
Browse the control room or ask AI in plain language. Every answer is grounded in your live directory data.
Visible business value, from day one
The right control room gives you immediate clarity and enough product realism to earn trust across leadership, audit, and operations.
10 views
of access unified in one portal
$41k/yr
median reclaimable license spend surfaced
5×
faster help desk access investigations
100%
read-only by default — your tenant stays safe
Built for every seat at the table
One portal, three audiences served
Leadership & board
Board-ready
Readable enough for leadership and audit conversations. Walk into a review with a clear picture of access, spend, and risk.
- Executive access summaries
- Reclaimable license spend
- Audit-friendly exports
IT admins & help desk
Operator-grade
Detailed enough for admins and help desk teams to trust. Resolve access questions without hunting through Entra.
- One-screen user context
- Group source attribution
- Provisioning health at a glance
Security & compliance
Defensible
Trace every permission to its origin. Spot guest sprawl, stale roles, and direct assignments before an auditor does.
- PIM & role visibility
- Direct vs. group access
- Guest account review
Why now
Ask your directory a question. Get a grounded answer.
Access data has outgrown the native Entra admin experience. AccessIQ adds an AI layer that reasons over your live directory and returns cited, structured results — so you can move from question to decision in seconds.
- Plain-language queries over users, groups, apps, and licenses
- Every answer links back to the underlying records
- Surfaces risk and waste your team would otherwise miss
Ask AccessIQ
Grounded in your live tenant
Three resources have direct assignments outside a security group. Here's where to look first:
grp-finance-access
23 members · 3 guests flagged for review
Salesforce (SCIM)
Provisioning healthy · 142 assigned
M365 E5 Security
11 unused seats · ~$6.4k/yr reclaimable