Aristo
Connections · what Aristo reads
Every read Aristo needs is granted (5 of 5); connect the Cost Management export next and your dollar figures turn from estimate to measured.
counted from your app token and your saved connections, checked on this visit
12 connections5 answering
Connected 5Not connected 6Not measured — no check exists yet 1
Microsoft Graph — application permissions
Seat counts, license truth, department grouping, the rollout radar — most counted figure in the product.
What it rides on
All 5 required application permissions are present in the roles claim of this tenant's own app token.
Rides on: Admin consent in Entra, granted once and revocable there
Azure Cost Management — reconciled export
The Cowork and credit dollars on every money surface. Without it those dollars are a labeled ESTIMATE rather than a measured figure.
What turns it on
No export is connected, so Cowork and credit dollars are shown as a labeled estimate envelope everywhere they appear.
Turns on: Connect a read-only Cost Management export SAS on the Settings page. Aristo validates that it cannot write before it will store it.
Rides on: A read-only blob SAS (sp ⊆ r,l) supplied by the customer
Shelf home (GitHub)
Where the skills your people build actually live. Without it a skill sits on Aristo's shelf only — still portable, but not in one place your organization governs.
What it rides on
Your organization's shelf lives in contoso/ai-shelf. 4 skills were counted on the last read. Aristo reads it once a day and never writes to it on a schedule.
Rides on: A GitHub App the company installs on its own organization, scoped to the shelf repository only. Never a personal token.
Azure Cost Management — intraday query
The month-to-date "so far" reading. Display-only — it never replaces the reconciled export as the source of record.
What turns it on
No subscription is configured for the intraday query, so the month-to-date reading is not offered anywhere.
Turns on: Add the subscription id on the Settings page, then grant the Aristo service principal Cost Management Reader on it in Azure.
Rides on: Cost Management Reader on the customer's subscription, granted in Azure
Copilot credits report
Per-policy credit consumption behind the spend lights and the credit share of the money trend.
What turns it on
No credits report has been ingested, so per-policy credit consumption is not shown and the spend lights fall back to the estimate envelope.
Turns on: Export the credits report from the Microsoft 365 admin center and paste it on the Settings page.
Rides on: None — the report is exported by an admin and pasted in
Microsoft 365 Message Center
The tenant's own Copilot rollout notices on the Roadmap workspace, told apart from the public roadmap on every row.
What it rides on
ServiceMessage.Read.All is present in the roles claim of this tenant's own app token.
Rides on: ServiceMessage.Read.All
Teams — the Aristo assistant
Proactive nudges, the sponsor digest, and the in-chat answer. Nothing on these workspaces depends on it.
What it rides on
40 people have met Aristo in Teams, counted from this organization’s recorded conversations on this visit.
Rides on: The Teams app, installed by an administrator
Office — Word, Excel and PowerPoint
Your reports inside the Office add-in.
What it rides on
Connected — an Office sign-in or leader confirmation is recorded. The rollout reads the same evidence.
Rides on: Your own Microsoft sign-in
Knowledge corpus — your own documents
Grounded answers about the organization's own material. No workspace figure depends on it.
What turns it on
The corpus is dark. Nothing of the organization's own material has been uploaded or indexed.
Turns on: Open the knowledge library to approve and index documents for your organization or one department.
Rides on: None — documents are uploaded by the organization
Microsoft account team — expansion signal
One notification to a named Microsoft seller when consumption reaches 90% of the cap. Nothing else ever leaves.
What turns it on
No Microsoft contact is named and no opt-in has been given, so this organization's consumption posture is never shared outside it.
Turns on: Name the contact and give the opt-in on the Settings page. Either one alone sends nothing.
Rides on: An explicit leader opt-in, separate from naming the contact
Commercial marketplace — SaaS fulfillment
Subscription lifecycle events, if and when this organization is transacted through the marketplace.
What turns it on
Aristo does not record marketplace events against an organization yet, so this row carries no state — gray, never a green it has not earned.
Turns on: Nothing on this page turns it on. It becomes measurable when the fulfillment handler records its own outcomes.
Rides on: Not applicable — this is a platform-side integration
Microsoft Secure Score
The security pillar of the Frontier score. While it is absent the pillar is DROPPED and the remaining weights re-normalize — it is never scored zero, which would read as a failing grade for a read nobody granted.
What turns it on
SecurityEvents.Read.All is absent from the roles claim in this tenant's app token.
Turns on: An administrator grants SecurityEvents.Read.All in Entra. The score then gains a pillar rather than changing one.
Rides on: SecurityEvents.Read.All