TenLens
Changelog

What we shipped, version by version.

TenLens follows a 4-week release cadence. Major versions land with a write-up here; dot-releases ship every Tuesday and are summarized in the release notes inside the app.

Latest · beta
Changelog · Security & Compliance

Conditional Access, side by side.

Every Conditional Access policy change in your tenants is now versioned. See exact diffs between any two revisions, including computed user-impact, and roll back to a known-good state in a single click.

tenlens · contoso.onmicrosoft.com
Policy diff · Block legacy auth
2 versions compared
v12 → v13
v12 · May 09Live
users: all
− exclude_groups: []
apps: office365
conditions: legacy_auth
grant: block
v13 · May 13Proposed
users: all
+ exclude_groups: [breakglass]
apps: office365
conditions: legacy_auth
grant: block
1 user-affecting change: 342 sign-ins / day
  • NEWPolicy version history with byte-exact diff view. Click any rule to see who changed what, when, and why.
  • NEWOne-click rollback to any previous version. Affected user count is computed before you commit.
  • NEWConditional Access "policy drift" alert, fires when changes happen outside TenLens.
  • IMPROVEDAudit log now surfaces the source IP and Entra correlation ID for every policy change.
  • FIXEDEmpty exclusion groups no longer cause silent allow-all evaluations.
Changelog · Licensing

License forecasting, built in.

A new forecasting model projects your seat usage 30, 60, and 90 days out per SKU, flags over-capacity risk before renewal, and tells you exactly how many seats you can safely reclaim.

tenlens · contoso.onmicrosoft.com
License utilization · E5 · 90-day forecast
2,400 seats
+178 by Aug 21 · over capacity
2,400 cap
RECLAIM
142 idle seats · 30+ days
BUY
36 seats before Aug 21
  • NEW90-day seat forecast for every Microsoft 365 SKU.
  • NEWReclaim recommendations based on activity, last-sign-in, and ticket history.
  • IMPROVEDLicense page now shows per-tenant + global utilization in a single view.
Changelog · Search

Find anyone, in any tenant.

Cmd-K search now spans every tenant you manage. Type a name, an email, or an object ID. Results stream in across users, groups, devices, and licenses, ranked by relevance, with the tenant in plain sight.

mira halonen⌘K
USERS · 4 matches across 3 tenants
MH
Mira Halonen· Northwind
mira@northwind.com
Owner
MH
Mira Halonen· Contoso
m.halonen@contoso.com
Member
MH
Mira Halonen· Adatum
mira.h@adatum.com
Member
MH
Mira Halo-Nen· Fabrikam
mhalonen@fabrikam.com
Member
GROUPS · 2 matches
mira-halonen-adminsNorthwind · 3 members
↵ open · ⇧↵ open in new pane3 tenants · 142ms
  • NEWMulti-tenant global search via ⌘K.
  • NEWFuzzy matching on display names, with diacritic + transliteration support.
  • IMPROVEDSearch now indexes group memberships and licenses, not just users.
  • IMPROVEDp95 latency cut from 1.2s → 142ms across 3-tenant test corpus.
Changelog · Automation

A visual runbook builder.

Stop writing PowerShell. Drag triggers, conditions, and actions onto a canvas, connect them, dry-run with real data, and publish. Every runbook compiles down to deterministic, auditable steps.

tenlens · contoso.onmicrosoft.com
Runbook · Onboarding · Engineering
5 steps · dry-run successful
Trigger
New user · HR
Resolve
Department → SG
License
Assign E3
Notify
#it-onboarding
Wait
24 hours
  • NEWDrag-and-drop runbook canvas: triggers, conditions, fan-out branches, waits.
  • NEWDry-run mode replays a runbook against the live directory without side effects.
  • NEWVersioning, approvals, and Slack/Teams notifications on every run.
  • IMPROVEDBuilt-in actions library now covers 40+ Entra and AD operations.
Changelog · Reporting

The reports library, reimagined.

124 prebuilt report templates, organized by source and intent. Pin the ones you check daily, schedule the rest, and trace every number back to the directory query that produced it.

tenlens · contoso.onmicrosoft.com
Reports library · 124 templates
Pinned
Entra · pinned
MFA Status
+12 today
3,914
AD · attention
Stale Accounts
+22
281
Entra
Licensed Users
−8
3,914
Entra
Risky Sign-ins
High
14
AD
Group Membership
Drift
318
Intune
Inactive Devices
60d+
94
  • NEW124 report templates across Microsoft 365, Entra ID, AD, and Intune.
  • NEWPinned + scheduled reports, with recurring delivery via email, Slack, or webhook.
  • NEWEvery metric links to a raw directory query you can copy or modify.
  • IMPROVEDReports now render in <300ms for tenants up to 50k seats.