Tenant

This is Contoso's tenant

Everything here is sample data, and you can't change it in the demo. On your own tenant these controls work.

Configuration changes

Changes to policies, tenant settings, labels and email-authentication records between refreshes. Orbit names who made a change when your audit log shows it. Edits between two nightly refreshes appear as one entry. Refresh restarts the comparison.

Each group shows the hub's score on the day of the change against the day before. Other changes that day, such as new users or devices, can also move the score.

Date	What	Change
2026-11-14	Entra ID 69 → 69 · no score change
	Conditional Access policy · CA003 - Require MFA for admin roles	changed (state) · by alex.taylor@contoso.com
	Named location · Head office egress	added · by alex.taylor@contoso.com
2026-11-10	Intune 70 → 70 · no score change
	Compliance policy · Windows - Baseline compliance	changed (scheduledActionsForRule) · by it@contoso.com
	Configuration profile · macOS - FileVault escrow	added · by it@contoso.com
2026-11-09	Teams 67 → 67 · no score change
	Teams meeting policy · Global	changed (AllowPSTNUsersToBypassLobby)
2026-11-09	Exchange 41 → 41 · no score change
	Mail flow rule · BCC sales enquiries to CRM	added
	Anti-malware policy · Default	changed (EnableFileFilter)
2026-11-07	Exchange 41 → 41 · no score change
	Email authentication (DNS) · contoso.com	changed (dmarc)
2026-11-03	Purview 73 → 73 · no score change
	Sensitivity label · Internal - Legacy	removed