When was Azure Active Directory Graph called - App registrations

Alfie Thomas 86 Reputation points
2022-12-01T10:25:44.447+00:00

Hi guys,

Was wondering if there was a way to run a report to see when the Azure Active Directory Graph API was last called per application that has it.

From this, I can tell if the app is either using it or MS Graph to Authenticate plus back up the fact that if it is only using AAD Graph but not actively calling it, to decommission the app.

Regards,

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 124K Reputation points MVP Volunteer Moderator
    2022-12-01T12:24:25.93+00:00

    The only way to get (somewhat useful) stats around app usage is via the App Governance tool, which unfortunately requires a separate SKU: https://learn.microsoft.com/en-us/defender-cloud-apps/app-governance-visibility-insights-view-apps
    Apart from that, you can check the sign-in logs for the app, including non-interactive ones, though these only go as far as 30 days back.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.