how to know Office 365 user ever logged in using mobile or desktop or Browser for different workloads like Teams , Exchange, Sharepoint

Question

Hello,

I'm currently working on creating a license recommendation tool in powershell to recommend a license to user. I need to check if user is only using mobile for accessing office 365 apps like teams , outlook , sharepoint etc. if he logged in desktop or browser I should get that data as well.

I came across one api to find the data GET https://graph.microsoft.com/v1.0/reports/getM365AppUserDetail(period='D7')?$format=application/json. I am not sure this is giving proper data

Any guidance or examples would be greatly appreciated.

Thank you in advance for your assistance!

Answer 1

While the "app usage" report can give you some clue, I'd recommend using the Microsoft 365 Active users report instead (getOffice365ActiveUserDetail), which gives you the "last activity date" per workload. Keep in mind that all reports show data with some delay, so it's not exactly current, but for your purpose, it should do.

Alternatively, you can crawl the Unified audit log entries to determine "last activity date" per user per workload, but that's a lot of overhead compared to leveraging the built-in reports. Still, it's the only way to get proper data for workloads for which we do not have matching Graph API endpoints just yet.