Unverified tenant domains
Detects domains configured in the tenant that are not currently verified.
How to fix it
Remove unused domains or complete DNS verification to prevent takeover.
Required Microsoft Graph permissions
EntraAnalyzer needs the following read-only Graph permissions to evaluate this rule:
Directory.Read.All
Further reading
Run this check on your tenant
EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.
Get started — free first scan →