Why is the Access Review of an AAD user group listing users with recent activity as part of the 30 days inactivity list?

Question

Why is the Access Review of an AAD user group listing users with recent activity as part of the 30 days inactivity list?

Michelle T 0

I created an access review to find user accounts that have had no activity (i.e. no sign -in) in the past 30 days. The resulting report includes users that were online yesterday. I was expecting the report to list accounts that have not been signed into 30 days prior to when the report was generated. If I created the report on April 30th, I would only expect to see results related to accounts that have not signed in before April 1st. Have I misunderstood how the review is supposed to work?

Dillon Silzer 60,831 Reputation points Volunteer Moderator

2023-04-25T21:29:58.7333333+00:00

Can you explain the exact situation you are trying to figure out? Is this for a certain application or administrative role? Or is this just to find out users who haven't signed into Azure AD in the last 30 days?
Michelle T 0 Reputation points

2023-04-25T21:48:43.0566667+00:00

Need to see which users it haven’t signed-in the last 30 days
Darach Nugent 0 Reputation points

2023-04-28T15:48:50.4833333+00:00

Seeing this in my tenant for reviews that have been running for months. Need to be careful here if you're auto applying results as the reviews are including active users.
Michelle T 0 Reputation points

2023-04-28T19:52:56.5866667+00:00

thankfully the review is not auto applying the results, but at some point, I would like to enable that option.