Landing Zone Permission Gaps

What this page is for

This page explains why Landing Zone assessment sometimes reports not verified and how to think about that without misreading the result.

When to use it

Use it when:

• the Landing Zone Scores tab shows not verified
• a stakeholder assumes not verified means pass
• you need to decide whether to rerun with broader visibility

How to understand it

Some Landing Zone checks need broader visibility than a simple resource read.

Common causes include:

• limited management group visibility
• missing identity or Entra context
• incomplete estate-wide access

If the review cannot see enough to make a trustworthy call, it should say so.

What it means in practice

Not verified means:

• not enough evidence to call it a pass
• not automatically a fail
• more visibility or follow-up may be needed

What to expect

This is a safer result than a false green pass. It is the product being explicit about what it could not prove.

Common mistakes

• treating not verified as if it were good news
• assuming the issue is always a product bug rather than a permission boundary
• using Landing Zone totals without understanding the evidence states underneath them

Next step

• Understanding Landing Zone results
• What the Landing Zone assessment covers