Run a Tenant Assessment
This article guides you through running a Tenant Assessment against a customer account or prospect tenant using the Tenant Assessment Wizard in Nerdio Manager for MSP.
The tasks in this procedure are performed at the MSP level.
Prerequisites
Role-based access control (RBAC) and permissions
At the MSP level:
- MSP Admin role, or a custom role with access to the Tenant Assessment Wizard.
For prospect tenant assessments, Admin Consent must be granted for the prospect tenant before an assessment can be run. See Grant Admin Consent for a prospect tenant for guidance.
Nerdio Manager roles
The following Nerdio Manager roles allow you to run a Tenant Assessment:
- MSP Admins can run assessments against customer accounts and prospect tenants.
Run an assessment against a customer account
- In Nerdio Manager for MSP, navigate to Accounts and select the customer account you want to assess.
- From the account menu, select Tenant Assessment.
- The wizard will scan the tenant’s existing policies — including Conditional Access policies, Intune configuration profiles, and other managed policies — and compare them against the Policy Baselines and Solution Baselines you intend to deploy.
- Review the assessment results. Each finding is categorized as one of the following:
| Category | Description |
|---|---|
| Conflict | An existing policy directly conflicts with a baseline policy. Deploying without resolving this conflict may produce unexpected behavior. |
| Overlap | An existing policy partially overlaps with a baseline policy. Review to determine whether consolidation is needed. |
| Recommendation | A suggestion to improve alignment with the intended baseline configuration. |
| Unavailable | A baseline cannot be applied due to authentication type or licensing restrictions in the tenant. |
- Address any conflicts or overlaps as needed before proceeding with baseline deployment.
- Optionally, export the results to CSV for review or record-keeping by clicking Export.
Run an assessment against a prospect tenant
- In Nerdio Manager for MSP, navigate to Accounts and select Prospect Tenants (or the equivalent entry point in your version).
- Select the prospect tenant you want to assess, or add a new one if it has not yet been configured.
- Ensure Admin Consent has been granted for the prospect tenant. If not, follow the on-screen prompt to complete this step before continuing.
- Select Run Assessment. The wizard will scan the prospect tenant’s existing policy configuration.
- Review the results using the same categories described above (Conflict, Overlap, Recommendation, Unavailable).
- Use the findings to plan any remediation work required before onboarding the tenant as a managed customer.
- Optionally, export the results to CSV by clicking Export.
Need help?
Contact our Sales team for more information about this feature.
Raise a support ticket about this feature.
Comments (0 comments)