M365 Tenant Discovery.
Scripts. Not guesswork.

# PAI MSP Toolkit — Prerequisite Setup Script
# Run as: .\01-prereq.ps1 -TenantDomain "contoso.onmicrosoft.com"
# Purpose: Install modules and authenticate to Microsoft 365 tenant

param(
  [Parameter(Mandatory=$true)]
  [string]$TenantDomain,
  [string]$OutputPath = ".\discovery-output"
)

Set-StrictMode -Version Latest
$ErrorActionPreference = "Stop"

Write-Host "PAI MSP Toolkit — Tenant Discovery Prereq Setup" -ForegroundColor Cyan
Write-Host "Tenant: $TenantDomain" -ForegroundColor Yellow
Write-Host ""

# Create output directory
if (-not (Test-Path $OutputPath)) {
  New-Item -ItemType Directory -Path $OutputPath | Out-Null
  Write-Host "Created output directory: $OutputPath" -ForegroundColor Green
}

# Module installation
$modules = @(
  "Microsoft.Graph",
  "ExchangeOnlineManagement",
  "MicrosoftTeams",
  "Az.Accounts",
  "PnP.PowerShell"
)

foreach ($mod in $modules) {
  if (-not (Get-Module -ListAvailable -Name $mod)) {
    Write-Host "Installing $mod..." -ForegroundColor Yellow
    Install-Module -Name $mod -Scope CurrentUser -Force -AllowClobber
    Write-Host "  $mod installed." -ForegroundColor Green
  } else {
    Write-Host "  $mod already installed." -ForegroundColor Gray
  }
}

# Connect to Microsoft Graph
Write-Host ""
Write-Host "Connecting to Microsoft Graph..." -ForegroundColor Cyan
$scopes = @(
  "Directory.Read.All",
  "Policy.Read.All",
  "AuditLog.Read.All",
  "SecurityEvents.Read.All",
  "Reports.Read.All",
  "RoleManagement.Read.Directory",
  "Organization.Read.All",
  "User.Read.All",
  "Group.Read.All",
  "Application.Read.All",
  "DeviceManagementConfiguration.Read.All"
)
Connect-MgGraph -Scopes $scopes -TenantId $TenantDomain

# Connect to Exchange Online
Write-Host "Connecting to Exchange Online..." -ForegroundColor Cyan
Connect-ExchangeOnline -Organization $TenantDomain -ShowBanner:$false

# Connect to Teams
Write-Host "Connecting to Microsoft Teams..." -ForegroundColor Cyan
Connect-MicrosoftTeams -TenantId $TenantDomain | Out-Null

Write-Host ""
Write-Host "All connections established. Ready to run discovery scripts." -ForegroundColor Green
Write-Host "Output will be written to: $OutputPath" -ForegroundColor Yellow

# PAI MSP Toolkit — Tenant Profile and Licensing
# Run as: .\02-tenant-profile.ps1 -OutputPath ".\discovery-output"
# Requires: Microsoft.Graph connected (run 01-prereq.ps1 first)

param(
  [string]$OutputPath = ".\discovery-output"
)

Set-StrictMode -Version Latest
Write-Host "Script 02: Tenant Profile and Licensing" -ForegroundColor Cyan

# AI-relevant SKU patterns to flag
$aiSkuPatterns = @(
  "COPILOT",
  "M365_COPILOT",
  "MICROSOFT_365_COPILOT",
  "VIVA",
  "POWER_AUTOMATE",
  "POWER_BI",
  "AZURE_AI",
  "COGNITIVE_SERVICES",
  "OPENAI",
  "SYNTEX"
)

# Org profile
$org = Get-MgOrganization
$orgProfile = [PSCustomObject]@{
  TenantId         = $org.Id
  DisplayName      = $org.DisplayName
  Domain           = ($org.VerifiedDomains | Where-Object { $_.IsDefault }).Name
  Country          = $org.CountryLetterCode
  CreatedDateTime  = $org.CreatedDateTime
  TenantType       = $org.TenantType
}
$orgProfile | ConvertTo-Json | Out-File "$OutputPath	enant-profile.json" -Encoding UTF8
Write-Host "  Tenant: $($org.DisplayName) | $($orgProfile.Domain)" -ForegroundColor Green

# Total user count
$userCount = (Get-MgUser -Count -ConsistencyLevel eventual -Filter "accountEnabled eq true").Length
Write-Host "  Active users: $userCount" -ForegroundColor Green

# Licence inventory
Write-Host "  Collecting licence data..." -ForegroundColor Yellow
$subscriptions = Get-MgSubscribedSku
$licenceRows = @()

foreach ($sub in $subscriptions) {
  $skuName = $sub.SkuPartNumber
  $isAiRelevant = $false
  foreach ($pattern in $aiSkuPatterns) {
    if ($skuName -like "*$pattern*") { $isAiRelevant = $true; break }
  }

  $licenceRows += [PSCustomObject]@{
    SKU              = $skuName
    FriendlyName     = $sub.SkuId  # Graph doesn't return friendly name; map manually
    TotalLicences    = $sub.PrepaidUnits.Enabled
    AssignedLicences = $sub.ConsumedUnits
    AvailableLicences = ($sub.PrepaidUnits.Enabled - $sub.ConsumedUnits)
    CapabilityStatus  = $sub.CapabilityStatus
    AIRelevant        = $isAiRelevant
  }
}

$licenceRows | Export-Csv "$OutputPathlicence-inventory.csv" -NoTypeInformation
Write-Host "  Licence inventory saved. AI-relevant SKUs found:" -ForegroundColor Green
$licenceRows | Where-Object { $_.AIRelevant } | ForEach-Object {
  Write-Host "    * $($_.SKU): $($_.AssignedLicences) / $($_.TotalLicences) assigned" -ForegroundColor Magenta
}

Write-Host "Script 02 complete." -ForegroundColor Green

Client-ready discovery system

The complete system turns raw tenant findings into a client-ready readiness report, roadmap, and scoped follow-on engagement.