Tenant
The organisation’s administrative Microsoft cloud boundary. Multiple tenants normally need explicit separate scope.
Conditional Access
Policies that evaluate identity and other signals to control access to resources. Assignments, exclusions and policy state affect coverage.
Consent grant
Authority given to an application to access resources under delegated or application permissions. Review purpose, scope and ownership.
Evidence population
The full set of records or objects from which the assessor selects a sample. A sample needs a defined population to be interpretable.
Secure Score
Microsoft’s measure of recommended security actions taken. It is not breach probability.
Assessment limitation
An unavailable record, excluded workload or other boundary that restricts what the assessor can conclude.
Closure evidence
The records or validation results agreed as demonstrating that a finding has been addressed.
