HomeMicrosoft 365 / Entra Site Proof Map

Technical source document

Microsoft 365 / Entra Site Proof Map

Rendered from the retained public repository snapshot. Original wording and result boundaries are preserved.

Original GitHub document All documentation

Microsoft 365 / Entra Site Proof Map

Date: 2026-06-05

Last reviewed: 2026-06-15

Purpose

This control document maps public portfolio claims to repository-local Microsoft 365 / Entra proof files. It exists to prevent unsupported public wording from appearing on the portfolio.

Public Microsoft 365 / Entra claims must remain:

  • Repository-local.
  • Evidence-backed.
  • Limited to the proof files listed here.
  • Clear about lab scope and documented limitations.

Scope Boundaries

Supported Scope

  • Personal Microsoft 365 / Entra cloud administration lab.
  • Read-only Microsoft Graph PowerShell evidence capture.
  • Tenant inventory review.
  • Identity and access review.
  • Conditional Access review.
  • Security group targeting.
  • App governance review.
  • License review.
  • Sign-in and audit review.
  • Admin center evidence.
  • Exchange admin center evidence.
  • Sanitized exports.
  • SHA-256 proof records.

Unsupported Scope

  • Production tenant administration.
  • Client tenant administration.
  • Enterprise impact metrics.
  • Managed Intune fleet.
  • Full endpoint management.
  • Active home lab infrastructure.
  • Proxmox, pfSense, VLAN, or AD DS home lab proof inside this Microsoft 365 / Entra proof scope.
  • Current SharePoint availability.

Reviewer Notes

  • Public claims must be backed by repository-local proof files, not memory, intent, screenshots stored elsewhere, or undocumented prior work.
  • Proof files listed here are the claim boundary for the Microsoft 365 / Entra public surface.
  • Do not upgrade lab evidence into production, client, enterprise, SOC, uptime, or business-impact language.
  • Do not use Microsoft 365 / Entra proof to support Proxmox, pfSense, VLAN, or AD DS home lab claims unless a separate on-prem home lab evidence file supports that claim.
  • SHA-256 records support integrity review for recorded files; they are not a tamper-proof guarantee beyond the captured hashes.
  • Intune evidence is limited to the documented validation attempt and limitation notes. It does not support managed Intune fleet administration.
  • Conditional Access wording must describe exported policy review and exported policy state. It must not imply client production enforcement or broad enterprise enforcement metrics.
  • If a referenced proof file is missing during future review, keep the reference visible and mark it as missing instead of deleting it.

Supported Claims

Microsoft Graph PowerShell Evidence Capture

  • Public claim: Microsoft Graph PowerShell evidence capture.
  • Proof file: m365-entra-live-proof-summary-20260605.md
  • Proof type: Summary with capture method.
  • Supported wording: Performed read-only Microsoft Graph PowerShell evidence capture from a personal Microsoft 365 / Entra tenant.
  • Page using claim: index.html, projects.html, resume.html

Tenant Identity and Organization Inventory

  • Public claim: Tenant identity and organization inventory.
  • Proof file: evidence/entra-exports-20260605-073748/tenant-organization-domains-skus.json
  • Proof type: JSON export.
  • Supported wording: Reviewed tenant ID, tenant account, organization display name, verified domains, and subscribed SKU records.
  • Page using claim: index.html, projects.html, proof.html, resume.html

Verified Domains

  • Public claim: Verified domains.
  • Proof file: evidence/entra-exports-20260605-073748/tenant-organization-domains-skus.json
  • Proof type: JSON export.
  • Supported wording: Verified two domains including jeremyfontenot.online.
  • Page using claim: index.html, dashboard.html, projects.html

Users and Groups

  • Public claim: Users and groups.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-users-license-state.csv
  • evidence/entra-exports-20260605-073748/entra-groups.csv
  • Proof type: Sanitized CSV exports.
  • Supported wording: Reviewed seven user license-state rows and eight group rows.
  • Page using claim: projects.html, proof.html, resume.html

Directory Role Review

  • Public claim: Directory role review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-directory-roles.csv
  • evidence/entra-exports-20260605-073748/entra-directory-role-assignments.csv
  • Proof type: CSV exports.
  • Supported wording: Reviewed directory roles and role assignment records for privileged-access awareness.
  • Page using claim: projects.html, proof.html, resume.html

Application Governance / Service Principals

  • Public claim: Application governance / service principals.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-service-principals.csv
  • entra-application-proof-20260605-063206/enterprise-applications-summary.csv
  • Proof type: CSV exports.
  • Supported wording: Reviewed enterprise applications and service principals for governance awareness.
  • Page using claim: projects.html, proof.html, dashboard.html

App Registrations

  • Public claim: App registrations.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-applications.csv
  • entra-application-proof-20260605-063206/app-registrations-summary.csv
  • Proof type: CSV exports.
  • Supported wording: Reviewed eight app registration records.
  • Page using claim: projects.html, dashboard.html

OAuth Grants

  • Public claim: OAuth grants.
  • Proof file: entra-application-proof-20260605-063206/oauth2-permission-grants-summary.csv
  • Proof type: CSV export.
  • Supported wording: Reviewed 16 OAuth permission grant records.
  • Page using claim: projects.html, dashboard.html

License and Service Plan Review

  • Public claim: License and service plan review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/tenant-organization-domains-skus.json
  • entra-license-proof-20260605-063412/subscribed-sku-service-plans.csv
  • Proof type: JSON and CSV exports.
  • Supported wording: Reviewed three subscribed SKUs, 68 service plans, and one licensed user record.
  • Page using claim: projects.html, dashboard.html, resume.html

Conditional Access Review

  • Public claim: Conditional Access review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-conditional-access-policies-summary.csv
  • evidence/entra-exports-20260605-073748/entra-conditional-access-policies.json
  • Proof type: CSV and JSON exports.
  • Supported wording: Reviewed exported Conditional Access policy records, including enabled policy rows.
  • Page using claim: index.html, projects.html, proof.html, resume.html

Security Group Targeting

  • Public claim: Security group targeting.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-sg-block-legacy-auth-group.csv
  • evidence/entra-exports-20260605-073748/entra-sg-block-legacy-auth-members.csv
  • Proof type: CSV exports.
  • Supported wording: Reviewed SG-Block-Legacy-Auth group targeting and membership evidence.
  • Page using claim: index.html, projects.html, proof.html, resume.html

Authentication and Security Policy Review

  • Public claim: Authentication and security policy review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-authentication-methods-policy.json
  • evidence/entra-exports-20260605-073748/entra-authorization-policy-security-defaults.json
  • Proof type: JSON exports.
  • Supported wording: Reviewed authentication-method policy and authorization/security-defaults state.
  • Page using claim: projects.html, proof.html, resume.html

Audit and Sign-In Log Review

  • Public claim: Audit and sign-in log review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-signins-last-30-days.csv
  • evidence/entra-exports-20260605-073748/entra-directory-audit-last-30-days.csv
  • Proof type: CSV exports.
  • Supported wording: Reviewed sign-in and directory audit visibility from exported records.
  • Page using claim: projects.html, proof.html, dashboard.html, resume.html

Device Inventory Review

  • Public claim: Device inventory review.
  • Proof files:
  • evidence/entra-exports-20260605-073748/entra-devices.csv
  • entra-device-proof-20260605-043942/entra-device-proof-summary.json
  • Proof type: CSV and JSON exports.
  • Supported wording: Reviewed Entra device inventory.
  • Page using claim: projects.html, proof.html, resume.html

Intune Validation Limitation

  • Public claim: Intune validation limitation.
  • Proof files:
  • intune-managed-device-proof-fallback-20260605-044051/README.md
  • intune-managed-device-proof-fallback-20260605-044051/intune-managed-device-proof-summary.json
  • Proof type: Limitation note and JSON summary.
  • Supported wording: Documented Intune managed-device validation attempt with access/licensing or API-scope limitation.
  • Page using claim: proof.html, resume.html

Microsoft 365 Admin Center Evidence

  • Public claim: Microsoft 365 admin center evidence.
  • Proof files:
  • evidence/entra-exports-20260605-073748/m365-admin-center-homepage-20260605.png
  • evidence/entra-exports-20260605-073748/m365-admin-center-domains-jeremyfontenot-online-20260605.png
  • evidence/entra-exports-20260605-073748/m365-admin-center-licenses-20260605.png
  • Proof type: Screenshots.
  • Supported wording: Reviewed Microsoft 365 admin center access, domain visibility, license visibility, users, and groups.
  • Page using claim: index.html, proof.html, resume.html, contact.html

Exchange Admin Center Evidence

  • Public claim: Exchange admin center evidence.
  • Proof files:
  • evidence/entra-exports-20260605-073748/exchange-admin-center-microsoft-365-groups-20260605.png
  • evidence/entra-exports-20260605-073748/exchange-admin-center-microsoft-365-groups-export-20260605.csv
  • evidence/entra-exports-20260605-073748/exchange-online-powershell-connection-attempt.md
  • Proof type: Screenshot, CSV export, documentation note.
  • Supported wording: Reviewed Exchange admin center Microsoft 365 groups evidence and connection-attempt documentation.
  • Page using claim: projects.html, proof.html, resume.html

SHA-256 Proof Integrity

  • Public claim: SHA-256 proof integrity.
  • Proof files:
  • m365-entra-proof-hashes-20260605.csv
  • evidence/entra-exports-20260605-073748/microsoft-365-lab-evidence-manifest-20260605.csv
  • Proof type: Hash CSV and manifest.
  • Supported wording: Maintained SHA-256 indexed proof records for evidence integrity review.
  • Page using claim: index.html, proof.html, dashboard.html, resume.html

Proof Inventory Count

  • Public claim: Proof inventory count.
  • Proof files:
  • m365-entra-proof-inventory-20260605.csv
  • m365-entra-proof-hashes-20260605.csv
  • Proof type: Inventory and hash CSVs.
  • Supported wording: Dashboard counts represent captured evidence inventory and hash records only.
  • Page using claim: dashboard.html, proof.html

Unsupported Claims

Microsoft Graph PowerShell Evidence Capture

  • Unsupported wording to avoid: Production tenant administration; client tenant administration.

Tenant Identity and Organization Inventory

  • Unsupported wording to avoid: Enterprise tenant ownership; paid subscription claim beyond exported SKU records.

Verified Domains

  • Unsupported wording to avoid: Current SharePoint availability; production domain administration.

Users and Groups

  • Unsupported wording to avoid: Managed workforce; enterprise user population.

Directory Role Review

  • Unsupported wording to avoid: Production privileged-access program ownership.

Application Governance / Service Principals

  • Unsupported wording to avoid: Client app governance; production app portfolio ownership.

App Registrations

  • Unsupported wording to avoid: Built or operated all app registrations in production.

OAuth Grants

  • Unsupported wording to avoid: Enterprise consent program ownership.

License and Service Plan Review

  • Unsupported wording to avoid: Current paid subscription status beyond exported records.

Conditional Access Review

  • Unsupported wording to avoid: Client production enforcement; broad enterprise enforcement metrics.

Security Group Targeting

  • Unsupported wording to avoid: Organization-wide endpoint fleet management.

Authentication and Security Policy Review

  • Unsupported wording to avoid: Security program ownership in production.

Audit and Sign-In Log Review

  • Unsupported wording to avoid: SOC ownership; enterprise detection metrics.

Device Inventory Review

  • Unsupported wording to avoid: Managed Intune fleet; full endpoint management.

Intune Validation Limitation

  • Unsupported wording to avoid: Active Intune administration; managed Intune fleet.

Microsoft 365 Admin Center Evidence

  • Unsupported wording to avoid: Current SharePoint hosting; production administration.

Exchange Admin Center Evidence

  • Unsupported wording to avoid: Exchange production administration; mail-flow ownership metrics.

SHA-256 Proof Integrity

  • Unsupported wording to avoid: Tamper-proof guarantee beyond recorded hashes.

Proof Inventory Count

  • Unsupported wording to avoid: Employment metrics; client impact metrics; production uptime metrics.

Safe Portfolio Language

Use wording such as:

  • Reviewed exported Microsoft 365 / Entra records.
  • Documented tenant inventory, identity records, groups, roles, applications, licenses, devices, sign-ins, and audit logs.
  • Captured read-only evidence from a personal Microsoft 365 / Entra lab tenant.
  • Validated exported records against repository-local proof files.
  • Mapped public claims to repository-local proof.
  • Maintained SHA-256 indexed proof records for evidence integrity review.
  • Documented Intune managed-device validation limitations.
  • Reviewed exported Conditional Access policy records and related security policy state.
  • Evidence-backed portfolio documentation.

Language to Avoid

Avoid wording that implies:

  • Managed enterprise environment.
  • Owned production tenant.
  • Implemented across organization.
  • Reduced risk by X%.
  • Improved uptime.
  • SOC monitoring or SOC ownership.
  • Managed Intune fleet.
  • Production deployment.
  • Client environment.
  • Production tenant administration.
  • Enterprise tenant ownership.
  • Full endpoint management.
  • Current SharePoint availability.
  • Tamper-proof guarantee beyond recorded hashes.
  • Enterprise impact metrics.