If you're on MS stack, this is all stuff that MS 365 Copilot will already do for you, but with much better defined barriers around what it can and cant access.
I check in once a month or so and get the same results.
The naming of these things makes it all very clear, really.