Share via

how many P1 or P2 licenses need to be purchased to access the sign-in activity report through the Microsoft Graph API.

Takeshi Sakaguchi 0 Reputation points
2023-04-25T09:41:23.8566667+00:00

I plan to pull all users' sign-in activity in a tenant from third-party apps through Microsoft Graph API.
I noted that Azure Active Directory P1 or P2 license need to have in the documentation.
https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins?source=docs#how-do-you-access-the-sign-in-logs
but I wonder how many licenses need to be purchased for users in the tenant.
For example, if 1000 users exist in a tenant, do I need to purchase 1000 P1 or P2 license?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,630 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Carlos Solís Salazar 17,791 Reputation points MVP
    2023-04-25T13:08:37.04+00:00

    Thank you for asking this question on the Microsoft Q&A Platform.

    You are correct, you will require at least a license of Azure Active Directory P1 for each user from which you will extract the sign-in activity through Microsoft Graph API. Hope this helps!

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

    NOTE: To answer you as quickly as possible, please mention me in your reply.

    0 comments
  2. JamesTran-MSFT 36,541 Reputation points Microsoft Employee
    2023-04-26T21:19:12.5433333+00:00

    @Takeshi Sakaguchi

    Thank you for your post and I apologize for the delayed response!

    I understand that you plan to pull all of your user's Sign-in logs within Azure Active Directory but noticed that if you have an Azure Active Directory P1 or P2 license, you can access the sign-in activity report through the Microsoft Graph API.

    When it comes to your specific question of how many licenses need to be purchased to access the sign-in logs from the Microsoft Graph API. From my understanding and referencing the Apply Licenses to Users documentation - Anyone who has a business need to use a licensed Azure AD service must have the required licenses... Because the sign-in activity report is available in all editions of Azure AD - if your user is the only one required access to the Microsoft Graph API to get the sign-in activity report, you should only need one Azure AD P1 license assigned directly to your user.

    Note: In a scenario where all your users are required to leverage a licensed feature for example Conditional Access Policies, you'll need the correct number of licenses per user.

    Additional Links:

    I hope this helps!

    If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.