Overview of inventory in the Microsoft 365 Apps admin center
Article
The Inventory page in the Microsoft 365 Apps admin center gives you insights into the state of Office installations on devices in your organization. These insights can help you identify issues with those Office installations, such as identifying devices that are running an older, unsupported build of Office. Insights are also available about add-ins that are installed on those devices.
From the Inventory page, you can drill down to see detailed information about a specific device, including hardware information, its operating system, and the Office software running on the device. Additionally, you can see if add-ins or macros are present on the device and the last signed in user.
Tip
If you want to get a better understanding on the benefits of using inventory, check out the Introduction to inventory video. If you want to go deeper in terms of how the inventory service works, which changes occur on your devices, and how to do troubleshoot missing devices, we recommend you check out the Inventory deep dive video.
Requirements
Supported built-in admin roles
You can use the following built-in Microsoft Entra roles for accessing and managing the feature:
Important
Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
Role
Description
Office Apps Administrator (Recommended)
This role can manage Office apps cloud services, including policy and settings management, and manage the ability to select, unselect, and publish 'what's new' feature content to end-user's devices.
Security Administrator
This role can read security information and reports and manage configuration in Microsoft Entra ID and Office 365.
Global Administrator
This role can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities.
Note
Global Reader is another built-in role supported by the Microsoft 365 Apps admin center, but it does not support some features like cloud update or the Modern App Settings page.
Licensing requirements
Your user must be assigned to one of the following subscription plans:
Type
Subscription Plan
Education
Microsoft 365 A3
Microsoft 365 A5
Business
Microsoft 365 Business Standard
Microsoft 365 Business Premium
Enterprise
Office 365 E3
Office 365 E5
Microsoft 365 E3
Microsoft 365 E5
Important
The following plans are not supported:
Microsoft 365 operated by 21Vianet
Microsoft 365 GCC
Microsoft 365 GCC High and DoD
Product version requirements
You can manage Microsoft 365 Apps on Windows with the following version requirements:
If you're new to inventory, you need to complete the one-step setup.
Once the setup is complete, insights about devices where users launched a Microsoft 365 app such as Word or Excel, appear on the Inventory page with an hour.
Inventory insights dashboard
The first page of Inventory is the insights dashboard. This page shows you insights across the devices in your organization, including the following information:
The number of different Office builds, devices on those builds, and their support status.
The number of different Office update channels, number of different builds from those update channels, and their support status.
The number of devices on which Microsoft 365 Apps, version 2008 or later, is installed and the architecture (32-bit versus 64-bit) being used.
The top installed COM add-ins on those devices.
The Inventory Search, find a specific device or addin.
Office build spread insight
The Office build spread insight shows you a view of each Office build installed on devices in your organization, grouped by build number or by unsupported builds. You can hover over the insight to get counts of devices per build or in the unsupported category.
By choosing Show all builds a flyout appears that provides more details, such as the build number, the update channel that the build came from, the number of devices on that build, and the support status of that build. You can also easily get to a filtered view of all devices that have an unsupported build of Office, so that you can take action on them.
Channels insight
The Channels insight shows you the number of builds in your environment by update channel and their support status. Choosing Show all channels shows you a flyout with additional information. From the flyout, you can select a given update channel to see a list of devices configured to use that update channel.
Devices insight
The Devices insight shows you a breakdown by Office architecture (32-bit versus 64-bit) for the devices in your organization. To see more information about your devices, choose Show all devices. From there, you can select any device in the table to show a flyout with additional information about that specific device. The main device table can be filtered by clicking on each column header. You can also export the full list of devices from this view.
Once you select show all devices you will see the Inventory table, the inventory table shows the following information:
Heading
Description
Name
The name of the device
Version
The version of Office that is installed on the device
Build
The build of Office that is installed on the device
Architecture
Office architecture on the device example x64/x32
Update channel
The update channel that Office is configured to receive Office updates from
Add-ins Present
Does the device contain add-ins
Macros used
Is the device running macros
Last contact
The last time the device checked in
Last user
The last user that signed into office on the device
Last email
The last user's email that signed into office on the device
Cloud Update status details
Heading
Description
Eligible for
The device is eligible for cloud update
Managed by
The device is managed by cloud update
Not eligible for profiles
The device is not on a channel supported by cloud update
Onboarding to
The device is onboarding to the desired cloud update profile
Excluded from
The device is excluded from the specific cloud update profile
Office device details
The flyout for a specific device shows the following information:
Heading
Description
Device name
The name of the device
Last seen
The last time the device checked in
Manufacturer
The device manufacturer
Model family
The device model family
Model
The device model
Total RAM
The amount of RAM installed on the device
OS family
The operating system that is running on the device
OS version
The version of the operating system that is running on the device
OS build
The build number of the operating system that is running on the device
Free storage
The remaining storage on the drive on which Office is installed
Total storage
The total storage on the drive on which Office is installed
Last signed in user and email
Information about who the last signed in user on the device was
Version
The version of Office that is installed on the device
Build
The build of Office that is installed on the device
Release date
The release date of that build of Office
Update channel
The update channel that Office is configured to receive Office updates from
Office apps
A list of the Office apps installed on the device
Office Add-ins
A list of the COM add-ins that are installed on the device. This list excludes Add-ins that are part of the Office installation.
Macro files
If the device recently opened a macro enabled file
The inventory reports the update channel for Office based on the build installed on the device. If the update channel was recently changed but the device hasn't completed the process of switching to the new update channel, then the inventory will still report the previous update channel.
Add-ins insight
The Add-ins insight shows the Office add-ins installed on the devices in your organization. The insight shows you the most commonly installed add-ins, the number of devices running that add-in, and the number of different versions of the add-in that are installed on devices in your organization. You can export the full add-in list from the add-in table.
If you choose Show all add-ins, you can see a table with the following information:
Column heading
Description
Name
The name of the add-in.
Version
The version number of the add-in. If there are multiple versions of the add-in installed on devices in your organization, you see Multiple.
Publisher
The publisher of the add-in.
Number of versions
The number of different versions of the add-in that are installed on devices in your organization.
Number of devices
The number of devices in your organization that the add-in is installed on.
You can drill down to see details about an add-in by clicking on its name. Those details include all the versions of that add-in that are installed in your organization, the architecture of the add-in, and the number of devices running that specific version of the add-in. You can then drill down further to see a list of the devices that a specific version of the add-in is installed on.
Note
Add-ins that are installed as part of Microsoft 365 Apps for enterprise won’t appear in the table.
Inventory search
If you need to find a specific device or add-in, you can use the search box located at the top of the page.
Note
The Inventory switch device update channel is in public preview.
Switch device update channel
You can use the Switch device update channel capability to change the update channel for Microsoft 365 Apps across the devices in your organization. To trigger a channel change using this capability, perform the following steps:
At the top of the Devices page, select Switch device update channel to reveal the flyout.
In the flyout, select the desired channel to move devices to and provide information for one of the following options:
One or more device names. These devices must be in inventory and not already be on the destination channel.
One or more Microsoft Entra groups. These groups can contain users or devices. If you include devices, they must be Entra joined or hybrid Entra joined.
Select Move devices, review the results, and close the flyout.
The channel change could take up to 24 hours to process. Once the change is complete, the updated channel is reflected in inventory.
Triggering a channel change is a point-in-time action. If you target a security group, the action will be based on the current membership of that group. If you add additional members to the group, you can re-run the action and any devices that have already been moved to the destination channel will be ignored.
A channel change will automatically enable cloud update for Current Channel and Monthly Enterprise Channel profiles.
Export inventory views
You can export the inventory views to .csv format so that you can import your data into other tools. To do an export, navigate to the Devices view and select the Export button. This service prepares the data in the background and notifies you when it's ready for download. Refresh the page periodically until the Download now link appears. Inventory always exports all data points, regardless of the currently set filters. There's no size limit to the export.
Note
Inventory data can be exported once per day and downloaded as many times as needed.
The following columns were added to inventory with the upgrade to Cloud Updates, but are not currently included when exporting data: Cloud Update Status, Update Status, and Wave.
Inventory does not support alternative methods for data export.
Inventory cleanup
Devices send a heartbeat once a day to the inventory. A device doesn't send a heartbeat for 30 days is removed from the inventory. If the device comes back online and sends a heartbeat, the device is added to the inventory again. You can extend this setting from 30 days by going to Settings in the navigation pane.
In a few cases, some devices might appear more than once in the inventory. This duplication mainly occurs with nonpersisted VDI environments. These duplicate entries are removed automatically each day.
Plan and execute an endpoint deployment strategy, using essential elements of modern management, co-management approaches, and Microsoft Intune integration.
Cloud Policy lets you enforce policy settings for Microsoft 365 Apps for enterprise on a user's device, even if the device isn't domain joined or otherwise managed.