Sign-in logs

Gopi Ponnusamy 41 Reputation points
2021-09-01T11:00:50.377+00:00

Hi Guys,

Any idea how to extract the user list based on sign-in logs who never log-in (in-active) past 30 days via Sentinal query or any other way?

Thanks in advance.!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,121 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,446 Reputation points
    2021-09-01T11:19:28.527+00:00

    Hi @Gopi Ponnusamy • Thank you for reaching out.

    You can use below Graph call to get a list of users who have not signed-in after a given date. In below example, you will get list of users who did not sign in after 2021-08-01.

    GET https://graph.microsoft.com/beta/users?filter=signInActivity/lastSignInDateTime le 2021-08-01T00:00:00Z&$select=displayName  
    

    To test this call, you can Sign in to Graph Explorer using Global Administrator of your tenant and execute above GET call.

    Permissions Required:

    1. Directory.AccessAsUser.All
    2. Directory.Read.All

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.