For organisations connected through Microsoft 365, uHealth shows the organisation's Microsoft Secure Score on the uHealth Dashboard. You can see how securely the Microsoft 365 tenant is configured, and which Microsoft recommendations would improve it most, alongside your users' risk – without opening the Microsoft admin centre for each customer.
In this article you will learn:
Where to find Secure Score
In the side menu, go to uHealth > Dashboard. The Microsoft Secure Score card is below the summary of your managed users and their risk, and above Health by pillar.
Note: Secure Score is only available for organisations connected through Microsoft 365 with a Microsoft Entra ID P1 or P2 licence. Organisations connected through Google Workspace won't see the Secure Score card.
How to read the score
The left side of the card shows the organisation's Current score:
The score as a percentage of the maximum Microsoft Secure Score, for example 48.6%.
A status, such as Below healthy, and how far the score is from the healthy level, for example 16.4 pts below healthy (65%).
The trend since the last change, for example Unchanged since Oct 31.
The date the score was measured, in the top-right corner of the card.
Below this, a chart shows the score over time against two lines: Healthy, the level to aim for, and Benchmark.
Click Show categories to see the score broken down by Microsoft Secure Score category, such as Identity, Apps and Data. For each category you'll see the percentage achieved and the points earned out of the points available, for example Apps 38% · 76 / 198. This shows which area of the tenant has the most room to improve. Click Hide categories to close the breakdown.
uHealth shows the Secure Score as Microsoft reports it and doesn't change your Microsoft configuration. Microsoft keeps Secure Score data for 90 days, so check the date before you share the score with a customer.
How to use the recommended actions
The right side of the card lists Microsoft's Recommended actions for the tenant, with the number still to address (for example, 40 actions to address). For each action you'll see:
The points the tenant has for it out of the maximum available, for example 0 / 8 pts.
How much the Secure Score would rise if you completed it, for example +2.99%.
The card shows the first five. Click Show all to see every action.
To complete an action, make the change in Microsoft 365. The new score appears in uHealth after Microsoft updates it.
Tip: Use the recommended actions together with the Hygiene pillar. For example, if many users have weak or no MFA, look for an action that enforces MFA across the whole tenant. Fixing the setting for everyone is often quicker than following up with each person.
How Secure Score relates to your users' risk
Secure Score and uHealth's risk ratings answer different questions:
uHealth risk ratings show how exposed the organisation is through its people – the users at Critical, High, Medium and Low risk, and the Health by pillar cards.
Microsoft Secure Score shows how securely the Microsoft 365 tenant itself is configured.
Secure Score doesn't change any user's risk level and isn't shown as a person's own score.
What it means if Secure Score isn't available
If uHealth can't get a Secure Score for a tenant, it tells you so rather than showing the tenant as healthy. A missing score means uHealth can't see it, not that there's no risk.
Microsoft gives the same response when a permission is missing as when the tenant doesn't have the right licence, so check both:
Check that the uHealth connection to Microsoft has the latest permissions. Existing connections may need a Global Administrator to approve access again.
Check that the tenant has a Microsoft Entra ID P1 or P2 licence.