#Manage Scan Profiles

In Auto discovery > Scan profiles, you can perform the following actions to manage scan profiles:

• Create – For each tenant, an object type can only be included in one scan profile. To create a scan profile for a tenant, click Create on the Scan profiles page, and then refer to the instructions in the following sections based on the object types for which the scan profile is created.

  • Auto Discovery for Microsoft 365

  • Auto Discovery for Power Platform

  • Auto Discovery for Active Directory (EnPower)

  • Auto Discovery for Agents

  • Auto Discovery for Google Workspace

  Note the following:

  • Auto discovery is supported by corresponding app profiles. Before you configure a scan profile for a tenant to scan objects, ensure that the required app profiles have been configured in App management. For details on app profiles, see App Management.
  • The auto discovery for Active Directory objects is only supported by the EnPower service. Before you configure scan profiles, ensure you have installed agents. For additional details, see Agent Management for EnPower.
  • For organizations that have configured Auto discovery scan profiles with the service account authentication, if these scan profiles are modified after the June 2023 release, the service account authentication methods will be obsolete from scan profiles. If you want to continue using service account authentication method for Auto discovery scan jobs, you must not update your Auto discovery scan profiles.

• View details – To view details of a scan profile, click the link in the Profile name column. The View details page appears. On the View details page, you can click Edit to edit the scan profile details and click View scan job history to view the scan profile’s job history. If you want to export the scan profile configuration, click the more actions button, and then click Export configuration. For details on monitoring scan jobs, refer to Job Monitor.

  

  NOTE

  Scan profiles will run jobs and randomly use app profiles which have the required permissions to scan objects. When you view the details of a scan job, the app profile used in the scan job will be displayed in the Authentication information table.

• Edit – To edit a scan profile, select the profile on the Scan profiles page and click Edit, or click Edit on the View details page of the profile. Note that the tenant cannot be changed when you edit a scan profile.

• Delete – To delete a scan profile, select the scan profile and click Delete. A pop-up window appears asking for your confirmation. To define how to deal with the scanned objects and configured custom containers, select a resolution from the following:

  • Delete the objects and custom containers along with the profile

    NOTE

    The deletion only applies to scanned objects and configured custom containers. The default containers cannot be deleted.

  • Keep the objects and custom containers in the system

  Click Confirm.

• Scan now – To run a scan profile now, select the scan profile and click Scan now. Click Confirm in the confirmation window to confirm your action. You can check the job status or stop the job in Job Monitor. For details, refer to Job Monitor.

• Download what’s new report – This report only supports scan profiles for Microsoft 365 and Power Platform objects. To view the conclusion report of a scan profile’s scan results, select the scan profile, click Download what’s new report, and then click Download weekly report or Download daily report. If you want to enable email notification for the what’s new report, refer to Auto Discovery Notification.

• Export configuration – To download a copy of a scan profile’s configuration, select the scan profile and click Export configuration.