Frequently Asked Questions
Maintained by: Aether365 Team Audience: All users Scope: Answers to frequently asked questions about Aether365
General
Does Aether365 make any changes to my Microsoft 365 tenant?
No. All Microsoft Graph permissions granted to Aether365 are read-only. Aether365 reads configuration data to evaluate security checks but never creates, modifies, or deletes any data in your tenant.
Do I need to install anything in my Microsoft 365 tenant?
No. Connecting your tenant only requires an admin consent grant - no agents, scripts, connectors, or additional application registrations in your tenant. The consent creates a service principal (enterprise application) in your tenant that Aether365 uses for authentication.
What Microsoft 365 plans are supported?
Aether365 works with all commercial Microsoft 365 plans including Business Basic, Business Standard, Business Premium, E3, and E5. Some checks require specific add-on licenses (e.g., Microsoft Defender for Office 365, Entra ID P2). Checks that require licenses you do not have will show as Skipped.
Can I use Aether365 with a Microsoft 365 GCC, GCC High, or DoD tenant?
Not currently. Aether365 uses the commercial Microsoft Graph endpoint. Government cloud tenants use different endpoints and may have different permission models. Contact hello@aether365.io if you need government cloud support.
How long does a scan take?
Compliance scans typically complete in 10 to 15 minutes. Exposure scans may take 15 to 20 minutes depending on the number of users, groups, and resources in your tenant. Larger tenants (10,000+ users) may take longer.
Security Checks
Why are some checks showing as Skipped?
Checks are skipped when they are not applicable to your tenant. Common reasons:
- License not present: A check requires a Microsoft 365 license or add-on you do not have (e.g., Defender P2, Entra ID P2)
- Feature not enabled: A check evaluates a feature that is not provisioned in your tenant
- Not applicable to tenant type: Some checks only apply to specific tenant configurations
Skipped checks do not affect your score. If you believe a check is incorrectly skipped, contact support.
Why is my score lower than last week?
A score drop usually means one of:
- A configuration was changed in your tenant that caused a previously-passing check to fail
- New checks were added to a framework - your score is recalculated including the new checks
- A previously-skipped check now runs because a license was added or a feature was enabled
To find what changed, compare the most recent scan with the previous one using the comparison view in the Scans page.
A check is failing but I have already fixed it. Why?
The fix will show in the next scan. Aether365 scans your tenant at the scheduled time - manual fixes are not applied retroactively to previous scan results. Trigger a new scan to verify the fix immediately.
Can I disable a specific check?
Not currently. Custom test suite configuration is available for qualified organisations - contact hello@aether365.io to discuss. Contact hello@aether365.io to discuss custom test suite configuration.
Notifications
I am not receiving scan emails.
- Check Settings > Notifications and verify that On scan complete is enabled
- Check your spam/junk folder for emails from
noreply@aether365.io - Add
noreply@aether365.ioto your safe senders list - Verify the email address in your account profile is correct
Teams messages are not appearing in my channel.
- Verify the webhook URL in Settings > Notifications is correct
- Check that the Connector or Workflow in Microsoft Teams is still active - it may have been deleted by a Teams admin
- Verify the Teams channel exists and you have access to it
- Try pasting the webhook URL into a browser and checking for an error response
API
Where do I find my API key?
Go to Settings > API Keys to create and manage keys.
My API key stopped working.
API keys do not expire, but they can be deleted. Check Settings > API Keys to verify the key still exists. If it was deleted, create a new key and update any systems using the old key.