Microsoft Entra ID Provisioning logs API

Question

Hi,
As per the official documentation, to fetch the provisioning logs for Entra ID, we will need a P1 or P2 license for the account fetching the logs.
In case the API is invoked by an account only having a free plan associated with it, what is the response for the API (https://graph.microsoft.com/v1.0/auditLogs/provisioning)?

Answer 1

@Ron Weasley Thank you for reaching out to us, If the API to fetch the provisioning logs for Entra ID (https://graph.microsoft.com/v1.0/auditLogs/provisioning) is invoked by an account that only has a free plan associated with it, the response will depend on the permissions of the account and the data that is available in the logs.

If the account has the necessary permissions to access the provisioning logs, the API will return the available data for the logs. However, if the account does not have the necessary permissions, the API will return an error message indicating that the account is not authorized to access the logs.

Note that the ability to access the provisioning logs is tied to the license level of the account that is accessing the logs. To access the provisioning logs, the account must have a P1 or P2 license. If the account only has a free plan associated with it, it will not be able to access the provisioning logs, even if it has the necessary permissions.

Reference: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-provisioning-logs

Let me know if you have any further questions, feel free to post back.