View monitor results and manage monitors

@@ -1,9 +1,10 @@ --- title: View monitor results and manage monitors titleSuffix: Microsoft Entra ID Governance-description: Learn how to view monitor results and configuration drifts and manage configuration monitors in Microsoft Entra Tenant Governance+description: Learn how to view monitor results, filter drifts by target tenant, and manage monitors in Microsoft Entra Tenant Governance. ms.topic: how-to-ms.date: 07/28/2026+ms.date: 11/12/2026+ai-usage: ai-assisted ---  <!-- source: Tenant Governance - View monitor results and manage monitors how-to.docx -->@@ -12,18 +13,23 @@ ms.date: 07/28/2026  Use the monitor experience to review monitor definitions, monitor run results, configuration drifts, baseline details, permissions readiness, settings, and audit logs. This article describes how to use the monitor pages after a monitor is created. +Configuration management supports operations in the home tenant and in other tenants that are connected through governance relationships. Monitor results and drift records describe resources in the monitor's target tenant.+ ## Prerequisites +- Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Administrator](~/identity/role-based-access-control/permissions-reference.md#global-administrator).+- The tenant has licenses for **Tenant Governance Basic** or **Tenant Governance Premium**. Basic includes monitor results and drift reporting for the home tenant and governed tenants. See [Microsoft Entra Tenant Governance licensing](licensing.md). - At least one configuration monitor exists in the tenant.-- You can sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) with a role that can view Tenant Governance monitor data. - The Tenant Configuration Management service has the permissions required to run the monitor. If a monitor run fails because of missing service permissions, [update the service permissions](how-to-set-up-permissions-tenant-monitoring.md) before you rely on later run results.+- To view drift in another tenant, verify that the governance relationship is active and that you have the required delegated access.  ## View monitors  To view the configuration monitors in your tenant, follow these steps: -1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).-1. Browse to **Tenant Governance** > **Monitors**.+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Administrator](~/identity/role-based-access-control/permissions-reference.md#global-administrator).+1. Browse to **Tenant Governance**. Under **Tenant management**, select **Monitors** for the home tenant. Under **Other tenants**, select **Monitors (Preview)** for governed tenants.+1. For governed tenants, use the target-tenant filters to select the tenant you want to review. 1. On the **Monitors** tab, review monitor definitions, create a monitor, refresh the list, or select a monitor to open its details.  ## View monitor results@@ -31,18 +37,29 @@ To view the configuration monitors in your tenant, follow these steps: To review the results of monitor runs, follow these steps:  1. Select the **Monitor results** tab.-1. Review the monitor name, monitor ID, start time, completion time, run status, and number of detected drifts.+1. Filter by target tenant to isolate home-tenant or governed-tenant runs.+1. Review the monitor name, monitor ID, target tenant, start time, completion time, run status, and number of detected drifts.  A monitor result summarizes a single monitor run. Use this page to identify failed or partially successful runs, and to find runs that detected configuration drift. +:::image type="content" source="../media/tenant-governance-configuration-management/monitor-results.png" alt-text="Screenshot of monitor results showing completion times, run status, and detected drift counts." lightbox="../media/tenant-governance-configuration-management/monitor-results.png":::++For governed-tenant runs, check the target tenant alongside the result.++:::image type="content" source="../media/tenant-governance-configuration-management/governed-tenant-monitor-results.png" alt-text="Screenshot of governed-tenant monitor results with target tenants and detected drift counts." lightbox="../media/tenant-governance-configuration-management/governed-tenant-monitor-results.png":::+ ## View configuration drifts  To review the configuration drifts a monitor detected, follow these steps:  1. Select the **Configuration drifts** tab.-1. Review the monitor, resource name, resource type, drifted properties, and first detection time.+1. Filter by target tenant to review drifts for the same scope as your monitor results.+1. Review the monitor, target tenant, resource name, resource type, drifted properties, and first detection time.+1. Select a drift record to compare current and expected property values. -A drift record identifies the resource and property that differ from the baseline. Use this page when you need to decide which workload administration experience to use for remediation.+A drift record identifies the resource and property that differ from the baseline. Confirm the target tenant when reviewing a drift. If you change tenant filters, check the selected scope on both the results and drifts pages; a tenant filter doesn't change a monitor's target or baseline.++:::image type="content" source="../media/tenant-governance-configuration-management/configuration-drifts.png" alt-text="Screenshot of configuration drifts showing affected resources, resource types, and drifted properties." lightbox="../media/tenant-governance-configuration-management/configuration-drifts.png":::  ## Manage a monitor @@ -53,16 +70,10 @@ To review and manage an individual monitor, follow these steps: 1. On **Monitor results**, review the run history for the selected monitor. 1. On **Configuration drifts**, review the drift records for the selected monitor. 1. On **Baseline**, view, edit, or download the monitor baseline JSON.-1. On **Permissions**, review the service authorization readiness.+1. On **Permissions**, review application and delegated permission readiness for the target tenant. 1. On **Settings**, view and manage the display name and description for the monitor. 1. On **Audit logs**, review the create and update events for the monitor. -## Correct configuration drift--Tenant Governance reports drift, but remediation happens in the administration experience that owns the drifted resource. For example, use the Microsoft Entra admin center or Microsoft Graph PowerShell to update a Conditional Access policy, or use the Exchange admin center or Exchange Online PowerShell to update an Exchange transport rule.--After you remediate drift, the next monitor run evaluates the tenant again and confirms that the actual resource state matches the baseline.- ## Related content  - [Configuration management](configuration-management.md)@@ -70,3 +81,4 @@ After you remediate drift, the next monitor run evaluates the tenant again and c - [configurationMonitoringResult](/graph/api/resources/configurationmonitoringresult?view=graph-rest-1.0&preserve-view=true) - [configurationDrift](/graph/api/resources/configurationdrift?view=graph-rest-1.0&preserve-view=true) - [Create a configuration monitor](how-to-create-monitor.md)+- [Update or delete a monitor](how-to-update-delete-monitor.md).