> For the complete documentation index, see [llms.txt](https://helpdesk.augmentt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://helpdesk.augmentt.com/modules.md).

# Modules

Once you've connected a tenant (see [Getting Started](/getting-started.md)), everything you do day-to-day happens inside one of three modules: **Secure**, **Engage**, and **Discover**. Each one covers a different part of managing your clients' Microsoft 365 environments.

<table data-view="cards"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-shield-halved" style="color:$primary;">:shield-halved:</i></h3></td><td><strong>Secure</strong></td><td>Audit and harden your clients' Microsoft 365 security posture.</td><td></td></tr><tr><td><h3><i class="fa-comments" style="color:$primary;">:comments:</i></h3></td><td><strong>Engage</strong></td><td>Automate user lifecycle management — onboarding, offboarding, and everyday account changes.</td><td></td></tr><tr><td><h3><i class="fa-magnifying-glass" style="color:$primary;">:magnifying-glass:</i></h3></td><td><strong>Discover</strong></td><td>See every SaaS application in use across your clients, with risk and approval status.</td><td></td></tr></tbody></table>

## Secure

Secure is your Microsoft 365 security posture and compliance auditing engine, plus the tools to actually fix what it finds. It runs a broad set of security checks against a connected tenant — covering things like MFA enforcement, Conditional Access policies, legacy authentication, risky sign-in and country restrictions, self-service password reset, mailbox auditing, and SharePoint/OneDrive sharing restrictions — and scores the tenant's compliance against that checklist.

Beyond auditing, Secure is also where you deploy and manage policy across the Microsoft stack:

* **Conditional Access** — policies, templates, and named locations
* **Defender** — policies and templates
* **Intune** — device configuration and compliance, app management and protection, and onboarding/deployment profiles
* **Purview** — DLP, retention, and sensitivity labels
* **Teams** — policies, templates, and settings
* **Entra ID** — groups

In short: Secure tells you where a tenant is exposed, and gives you the controls to close the gap.

## Engage

Engage handles the day-to-day lifecycle of your clients' users — the repetitive account work that used to mean clicking through the Microsoft 365 admin center by hand. That includes onboarding and offboarding users (with default settings you can standardize across clients), password resets, distribution list management, mail forwarding, out-of-office configuration, and temporary access passes. There's also a scheduled offboarding action log, so you can queue an offboarding to run at a future date rather than doing it live.

In short: Engage is where you manage the humans in a tenant, not just the tenant's configuration.

## Discover

Discover gives you visibility into what SaaS applications your clients' users are actually using — including the ones nobody signed off on. A lightweight Discovery Agent feeds back application usage data, and Discover scores each app by approval status, productivity, and risk. It also includes an App Catalog for reference and a Discover Compliance view for a risk-focused read on what's running in a tenant.

In short: Discover answers "what's actually running in this environment, and should it be?"


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://helpdesk.augmentt.com/modules.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.