November 10 enhancements
IN THE SPOTLIGHT
![]() |
[COREY] Create Custom Actions with natural-language requests: Tenant administrators can now describe a Custom Action to Corey, which generates the action title, inputs, target, and PowerShell script. When a request needs clarification, Corey asks follow-up questions before generating the action. A chat card opens a side panel where administrators can review a plain-language description and the generated script, then copy or download the script. Administrators can continue the conversation to add or remove parts of the action. When the action is ready, they can discard it, save it as a draft for later editing in “Manage Custom Actions”, or save and publish it immediately without the approval process. Direct publishing is currently available only for actions created through Corey. Custom Actions created through CoreView follow the standard internal validation process. Corey cannot currently validate existing Custom Actions. |
![]() |
[SHAREPOINT DASHBOARD] Last access data for sites and files: SharePoint reports, dashboard widgets, and policies now use last access data to identify files and sites that are inactive based on actual usage, rather than only when content was last edited. Last access records when users open or view SharePoint sites, files, and folders. This helps distinguish unused content from content that is actively accessed but not modified. The new “Last access date UTC” and “Guest last access date UTC” columns show this data in the SharePoint sites drilldowns, Items with unique permissions, and SharePoint item-level reports. The data is refreshed through delta imports, allowing reports, dashboard widgets, and policies to use current access activity without requiring full SharePoint re-imports. This feature is only available with the CoreView Control for SharePoint add-on. |
OTHER IMPROVEMENTS
![]() |
[SHAREPOINT ITEM-LEVEL] Delete file versions by range: Admins can now delete a selected range of SharePoint file versions through Management Actions and Workflows, including Playbook remediation. The current version is always preserved, and results are logged for each file. This feature is only available with the CoreView Control for SharePoint add-on. |
![]() |
[SHAREPOINT DASHBOARD] Top inactive items by reclaimable storage widget: The Activity & storage tab in the SharePoint dashboard now lists inactive sites and files with the highest reclaimable storage. The widget follows the investigation period configured in the related Policy. “See more” opens the corresponding report with the same period applied. This feature is only available with the CoreView Control for SharePoint add-on. |
![]() |
[SHAREPOINT DASHBOARD] Inactive sites in a selected period and Inactive files in a selected period Policies: Two new Policies identify SharePoint sites and SharePoint files with no activity in the last 7, 30, 90, or 180 days. Administrators can report on these items, or start an approval Workflow to delete or archive them. Archive remediation is available only for sites where Microsoft 365 Archive File Archive is enabled. These features are only available with the CoreView Control for SharePoint add-on. |
![]() |
[SHAREPOINT DASHBOARD] Active vs. Inactive items widget: The Activity & storage tab now shows active and inactive SharePoint sites and files for the selected Virtual Tenant. Admins can select a 7-, 30-, 90-, or 180-day observation period. This feature is only available with the CoreView Control for SharePoint add-on. |
![]() |
[CONFIGURATION RESILIENCE DASHBOARD] Monitoring widget updated UI: The dashboard now shows recent configuration changes across all scopes in a heatmap. Administrators can filter activity by time range, Category, or Workload. Selecting a scope opens its Change history. This feature is only available with the Configuration Resilience module. |
![]() |
[CONFIGURATION RESILIENCE] Configurable scope views in Monitoring: The Monitoring page now displays all scopes by default. Use the “View by” dropdown to switch between all scopes, categories, and workloads, which are listed alphabetically. This feature is only available with the Configuration Resilience module. |
![]() |
[GROUP CARDS] “Execute workflow” Action: The “Execute workflow” Action is available again on security group cards. Operators can run Workflows for the full group or selected table items. The Smart panel shows the current target. This enhancement was inspired by a customer request. |
![]() |
[WORKFLOWS] “ScheduledBy” execution input: Scheduled Workflow Actions now include “ScheduledBy”, which identifies the user who scheduled the Workflow. It is available alongside “ExecutedBy” in all actions and can be used in notifications, Custom Actions, and custom validations. This enhancement was inspired by a customer request. |









