Most IT teams already use InventoryOS to answer “what’s on this machine?” The next question is always about people: Who has a license? Who skipped MFA? Which mailbox is almost full? Who can read the finance shared mailbox?
Until now, those answers lived in separate Microsoft 365 or Google Workspace admin experiences, export scripts, or spreadsheets someone updates once a quarter. Users & Email Identity brings directory data into InventoryOS so your team can work from one place.
Included on Professional and Enterprise plans. Connect from the Users page or Organization settings. Software integrations (EDR, RMM) stay under Software → Integrations; identity sync is its own workflow.
Connect once, then work from InventoryOS
A global admin (or equivalent) grants consent once for Microsoft 365 or completes the Google Workspace wizard. After that, technicians and managers use their normal InventoryOS login. They do not need a separate Microsoft 365 admin account, shared break-glass credentials, or a browser full of admin center tabs for day-to-day checks.
- Microsoft 365: One-click admin consent through Entra ID. InventoryOS registers the app and syncs on a schedule.
- Google Workspace: Guided setup with domain-wide delegation so user and group data flows in securely.
- Hourly sync: Users, guests, groups, and shared mailboxes stay current without manual CSV exports.
One Users table, built like Agents
If you already manage devices in InventoryOS, the Users experience will feel familiar. Search, filter, export to CSV, reorder columns, and open a profile for deep details.
At a glance you can see:
- Licenses with official product names (or Unlicensed) as badges
- Last online from sign-in activity reports
- Mailbox storage as a usage bar so full mailboxes stand out
- MFA registered and MFA enforced with clear yes/no indicators
- Forwarding when mail is leaving the mailbox
- Notes for technician context, just like device rows
Shared mailboxes, guests, and groups are included too, sorted in a sensible order so operational mailboxes do not get buried under member accounts.
Catch MFA and mailbox problems early
Security reviews and client QBRs often fail because someone noticed a gap too late. InventoryOS surfaces the signals your team already cares about:
- MFA not registered: Spot licensed users who still have not enrolled before an audit or insurance questionnaire.
- MFA not enforced: Separate “registered” from “enforced” so policy gaps are obvious.
- Mailbox nearly full: Storage bars highlight accounts approaching quota without opening Exchange admin.
- Unexpected forwarding: Forwarding rules that send mail outside the organization show up in the table and on user profiles.
Use filters and saved views to build a short list of accounts that need attention this week, then export or share directory PDF reports with leadership.
Reports that answer “who has access to what?”
Device inventory tells you what is installed. Identity inventory tells you who can reach sensitive mail and data. InventoryOS includes directory PDF reports you can schedule or download on demand:
- Users MFA Report: Summary of MFA posture plus users who still need attention.
- Users Directory Report: Licensed users, guests, groups, and sign-in activity in one export-friendly layout.
- Mailbox Permissions & Forwarding: Shared mailboxes, forwarding targets, and delegated access (Read and manage, Send as, Send on behalf) aligned with what you expect in Microsoft 365 admin.
For MSPs, run the same reports per client organization. For internal IT, hand security and compliance teams a consistent snapshot without rebuilding PowerShell scripts every quarter.
User profiles with the details that matter
Click any row to open a structured profile: email aliases, group membership, authentication methods, forwarding settings, and mailbox permission grantees. Shared mailboxes show members and delegates in the same layout as user accounts so nothing feels like a bolt-on.
When Graph or Exchange data is temporarily unavailable, the UI tells you whether permissions are missing versus Microsoft simply not reporting yet, so you are not guessing from empty columns.
What this means for your company
MSPs get client-ready identity visibility beside agent inventory: fewer portal logins, faster audits, and one place to prove MFA and mailbox hygiene before renewals.
Internal IT and security teams reduce shadow processes (shared admin passwords, one-off scripts, quarterly spreadsheet pulls) and give help desk staff read-only visibility without handing out global admin rights.
Compliance and leadership get repeatable PDF evidence for access reviews, not screenshots pasted into slide decks.
Get started
- Sign in to InventoryOS on a Professional or Enterprise plan.
- Open Users and connect Microsoft 365 or Google Workspace for the organization.
- Wait for the first sync (progress shows users, shared mailboxes, guests, and groups).
- Filter for MFA gaps or high mailbox usage, then export or schedule a directory report.
Want to explore before you connect? Open the live demo, click Users in the top navigation, and walk through sample data.