Zero Trust Snapshot
The Zero Trust Snapshot is a three-page PDF, separate from the full report, that summarizes how close your Microsoft Entra tenant is to a Zero Trust model. It is designed to be handed to management or to a customer: mostly diagrams and numbers, few words.
Generating the Snapshot
Open a Microsoft Entra assessment, go to the Report tab and click Zero Trust Snapshot. The snapshot opens in a new window; use Print / Save PDF to save it. It is available to users who can open the full report, in English or Italian.
The snapshot describes the tenant on the day of the assessment. When the same tenant has an earlier assessment, the third page shows how the main indicators changed since then.
What the Three Pages Show
| Page | What you find |
|---|---|
| Identity and access | The Microsoft Entra score, a short "At a glance" summary, and the strongest authentication method of administrators and of all users: password only, phishable methods (authenticator app, one-time codes, SMS or phone call) or phishing-resistant methods (passkeys and security keys, Windows Hello for Business). |
| Conditional Access and devices | How many users are really covered by a Conditional Access policy that requires MFA, with emergency access accounts kept apart from other exclusions, and the devices from registered to managed and compliant. |
| Privileged access | How administrative roles are assigned: always active or activated only when needed through Privileged Identity Management, synchronized from on-premises or cloud-only, Global Administrators, emergency access accounts, guests and applications with privileged roles. Below, the trend since the previous assessment. |
Licenses
The authentication methods on the first page require Microsoft Entra ID P1 or P2, and Privileged Identity Management requires P2: without it, every role assignment counts as always active and the page says so.