Run metadata
- Output schema
- ews-audit-output/v3
- HTML artifact version
- ews-portfolio-overview-html/v3
- Binary version
- 0.3.0-rc.2
- Policy model version
- ews-policy-model/v1
- Run fingerprint
- e8b0c9535daefa375f7ce76ca68386ca2f4e9ca2bcdef9a66d9b408af01d1077
- As of UTC
- 2026-08-10T12:00:00Z
Portfolio totals
- Tenants
- 3
- Observed applications
- 2
- App-only rights
- 4
- Tenant-wide delegated rights
- 1
- Principal delegated rights
- 1
- Modeled allowed
- 1
- Modeled blocked
- 1
- Modeled phased block
- 1
- Cannot determine
- 1
Tenant summary
| Tenant | Observed | Modeled allowed | Modeled blocked | Cannot determine | Unresolved |
|---|---|---|---|---|---|
| fictional-alpha | 1 | 1 | 1 | 0 | 2 |
| fictional-beta | 1 | 0 | 0 | 0 | 1 |
| fictional-gamma | 0 | 0 | 0 | 1 | 1 |
Application evidence
| Tenant | Application ID | Display name |
|---|---|---|
| fictional-alpha | 00000000-0000-4000-8000-000000000011 | Unknown application |
| fictional-alpha | 00000000-0000-4000-8000-000000000012 | Unknown application |
| fictional-beta | 00000000-0000-4000-8000-000000000021 | Unknown application |
| fictional-gamma | 00000000-0000-4000-8000-000000000031 | Unknown application |
Full-replace warning
Configuration proposals are review-only full-set replacements. No change is authorized or executed by these artifacts.
- REVIEW_CURRENT_FULL_SET
- REVIEW_ADD_DELTA
- REVIEW_REMOVE_DELTA
- REVIEW_LEGACY_POLICY
- REVIEW_MAILBOX_LIMITATIONS
- AUTHORIZE_CHANGE_OUTSIDE_PRODUCT
Required non-claims
This is a dated evidence-based model. It is not complete EWS discovery; it is not a live authorization test; it is not exact application-to-mailbox mapping; it is not production-safe allowlisting; it is not outage prevention; it is not Microsoft certification; and it is not proof of migration readiness.