Service 01
The Environment Baseline: a SharePoint permissions audit
TechRam's Environment Baseline tells you whether your SharePoint is ready for Copilot — a fixed-scope SharePoint permissions audit of who can reach what, which links point outside the organisation and what storage costs. Copilot answers from whatever a user can reach, so that's the readiness question. Two to three weeks, nothing changed, and a plan you own.
- 2–3 weeks
Timeframe
Two to three weeks
You end up with
A prioritised plan you own
With a number against each item.
Who it's for
Organisations where SharePoint grew without a plan, and nobody can now say with confidence who can see what. Usually an operations or technology lead who inherited a tenant they didn't design and is being asked about Copilot.
What we do
- Every site read against your tenant, with its sprawl and its owners
- Permission inheritance mapped, and every place it has been broken
- External sharing and guest accounts listed, with the links that still work
- Storage growth broken down by what is driving it
- Licence allocation set against actual use
How it works
Step 1
Read the current state against your tenant, changing nothing
Step 2
Walk you through what we found, and what we wouldn't bother fixing
Step 3
Hand over the prioritised plan, with a number against each item
The problem it answers
Nobody in the business can answer three questions: who can see what, what is being shared outside the organisation, and how much of the storage you are paying for is content no one has opened in five years.
So governance projects get scoped on guesswork, Copilot gets switched on over unknown permissions, and the storage bill keeps climbing.
Without a baseline, and with one
Without
- Permissions unknown
- Sharing links unaudited
- Storage growing
- Plan built on opinion
With
- Every site owner named
- Every external link listed
- Storage tiered and costed
- Plan built on evidence
Is this a fit?
Yes, if
- 50–500 staff on Microsoft 365
- SharePoint grew without a plan
- Copilot is on the agenda
Not yet, if
- You have no Microsoft 365 tenant
- You want a helpdesk
- You need one file moved
Related reading
How does TechRam scope fixed-price SharePoint work?
Read it → — How does TechRam scope fixed-price SharePoint work?How do you find out what is shared outside your Microsoft 365 tenant?
Read it → — How do you find out what is shared outside your Microsoft 365 tenant?
Start here for free
External Sharing Risk Scanner
Deploys in under 30 min
Deploy it in your own tenant → — External Sharing Risk Scanner
What this does for your AI
Copilot can only be trusted where permissions are known. This is where that starts.
Common questions
01. How is an Environment Baseline different from what our MSP already does?
Your MSP keeps the tenant running. This reads what is in it and tells you what to fix first, which is a different job. We hand the findings to whoever does the work, and that's often them.
02. Our permissions are a mess. Should we fix that first?
No. This is the thing you do first, precisely because they're a mess. It is read-only, it changes nothing, and the mess is what it's for.
03. Is our SharePoint ready for Copilot?
Usually not yet, and it's quicker to check than to guess. Microsoft's own documentation says Copilot only shows people what they can already open, so the question is really about permissions: sites open to everyone, links pointing outside, access inherited from projects that closed years ago. The Baseline reads all of it, changes nothing, and tells you what to fix first.
04. What does an Environment Baseline cost?
Fixed scope, quoted in writing before work starts, and the number doesn't move because the work turned out harder than we expected. We don't publish a range, because the scope is what sets it and a range without a scope is a guess you would have to unlearn.
05. Do we need to buy anything new for an Environment Baseline?
Almost never. We start with what is already in your Microsoft 365 licensing, and we don't resell licences or earn a margin on them. Where something genuinely isn't covered we'll say so before you commit, not after.
06. What happens when the Baseline is finished?
You own it: the systems, the documentation, and the ability to maintain them without us. Run & Improve exists if you would rather we kept it current, and it's monthly with no lock-in.