Before you begin
- An Atlas administrator account (to change the setting from Atlas), or a Microsoft 365 Global Administrator or Reports Reader with edit rights (to change it in the admin center)
- For the in-app path, the Atlas app registration must hold the Microsoft Graph ReportSettings.ReadWrite.All application permission with admin consent. The standard Atlas setup script grants it
Why names are hidden
Microsoft 365 has a tenant-wide report privacy setting called "Display concealed user, group, and site names in all reports". Microsoft turns it on by default for new tenants. While it is on, every usage report Microsoft produces (SharePoint, OneDrive, Teams and Exchange) replaces user, group and site names with an anonymous code.
Atlas builds its Microsoft 365 inventory from those same reports. When the setting is on, Atlas detects the anonymous codes and shows a dash rather than a meaningless string, and the SharePoint page tells you how many sites are affected.
Nothing is wrong with your Atlas deployment or its permissions. The inventory is complete; the setting simply hides who each row belongs to.
Option 1: Turn it off from Atlas (recommended)
The quickest fix is the button on the notice itself.
- In Atlas, open Microsoft 365 → SharePoint for the affected tenant.
- In the "Site names are hidden" notice, click Show real site names.
- Read the confirmation: the change is tenant-wide and reveals names in every Microsoft 365 usage report. Then click Turn off concealment.
- Atlas applies the change through Microsoft Graph immediately and records it in the audit log. The notice changes to say the setting is already off.
The same setting is available as a switch in Settings → Configuration Matrix, in the Security & Compliance category, as "Conceal Names in Microsoft 365 Reports". Turn it off there to reveal names, or on to conceal them again; "Refresh status" re-reads the live value from Microsoft. The Open Settings Matrix link in the notice goes straight to that row, and Step-by-step guide opens this article.
If the button is not there
Atlas only shows Show real site names when it can make the change for you. If you see a note naming the ReportSettings.ReadWrite.All permission instead, the Atlas app registration in that tenant has not been granted that permission yet.
- Re-run the Atlas setup script for the tenant, which grants the current permission set including ReportSettings.ReadWrite.All (see Recreate App Registration API Permissions).
- Or add it by hand: Microsoft Entra admin center → App registrations → the Atlas app → API permissions → Add a permission → Microsoft Graph → Application permissions → ReportSettings.ReadWrite.All, then Grant admin consent.
- Or skip the permission entirely and use Option 2 below.
The permission is optional. Atlas reads the inventory without it; it is only needed for Atlas to change the report privacy setting on your behalf.
Option 2: Turn it off in the Microsoft 365 admin center
You can also change the setting where Microsoft keeps it.
- Sign in to the Microsoft 365 admin center (admin.microsoft.com, or the government portal for GCC High tenants) as a Global Administrator.
- Go to Settings → Org settings.
- On the Services tab, select Reports.
- Clear the checkbox "Display concealed user, group, and site names in all reports".
- Click Save.
- Back in Atlas, open Settings → Configuration Matrix, find "Conceal Names in Microsoft 365 Reports" and click Refresh status so Atlas records the new value.
When the names appear
Microsoft regenerates its usage reports on its own schedule, usually within 24 to 48 hours of the change. Until then the SharePoint page keeps showing dashes and the notice says the setting is already off and the reports are still refreshing. After that window, click Refresh on the SharePoint or OneDrive page to pull the updated reports.
This setting is tenant-wide. Turning it off reveals user, group and site names in every Microsoft 365 usage report, including the ones your own administrators see in the admin center, not only the pages in Atlas. If your organisation relies on anonymised reports for privacy reasons, check with whoever owns that policy before changing it.