Every dial and switch, mapped — honestly.

Every entry on this map is a real screen’s worth of settings in a Microsoft admin console. “Answers live” means the map declares a read path for it — the call the product makes when you open that screen signed in. That call is Microsoft Graph for 544 of the 817, and for the rest it is a Microsoft PowerShell command run by our own connector inside your network, or a Microsoft interface that is not Graph. All three are real reads of your own company’s data, which is why they are counted together. It is not a promise that every company has granted the permission it needs: when a read is refused for your company, the screen says so instead of showing an empty list. “Changeable” means a change can be prepared and run through the approval gate. The totals on this page are computed from the map itself as it is rendered; nobody types them.

They are different admissions, and we stopped printing one over both. “No Microsoft way in” (183 screens) means Microsoft publishes no connection to that page at all — their own console is the only way to see or change it, and nothing we build will change that. “Mapped, not built yet” (80 screens) means Microsoft does publish a way in and we have not built it. That one is on us, and saying so is the point: blaming Microsoft for our own backlog would be the easy version. We list both anyway, because a map with the hard parts erased isn’t a map, and as each one is built its state changes here automatically.

Because it shows its work: the states come from the same registry the product runs on, the counts are computed from the rows you’re scrolling, and the things we can’t do are printed in the same font size as the things we can.