Running snapshots
There are two ways to run a snapshot in Driftmark:- manual snapshot run
- scheduled automatic snapshot run
Manual snapshot run
Use a manual run when you want to capture the current tenant state immediately. This is useful when:- you just connected a tenant
- you just assigned or changed a template
- you made a known configuration change and want to verify it
- you want an on-demand drift check
Where to run it
You can run a manual snapshot from:- the Microsoft integrations page
- the tenant configuration page
Scheduled automatic snapshot run
Use a scheduled run when you want Driftmark to capture snapshots on a regular cadence without manual intervention. This is configured per tenant on the tenant configuration page.Where to configure it
Go to:Settings -> Integrations -> Microsoft
Then open the tenant and use the Snapshot schedule section.
You can configure:
- how often the snapshot runs
- the interval unit
- the start date and time
Choosing between manual and scheduled runs
Use manual runs when
- you need a snapshot right now
- you are testing a new connection
- you are validating a change before or after remediation
Use scheduled runs when
- you want regular evidence collection
- you want ongoing drift monitoring
- you want consistent historical coverage over time
Practical workflow
A common workflow is:- Connect the tenant.
- Assign a template.
- Run the first snapshot manually.
- Review the results.
- Configure the ongoing schedule for future snapshots.
After the snapshot runs
Once a snapshot completes, you can:- review the overview tab
- inspect the inventory tab
- compare drift
- add comments
- export the snapshot as JSON