Identity and access reports API overview

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

With Microsoft Graph, you can use access identity and access reports to get information about how people in your business are using applications in your Microsoft Entra tenant.

Authorization

Microsoft Graph controls access to resources using permissions. You must specify the permissions you need in order to access reports resources. For more information, see the permissions section in the corresponding API documetation.

What are identity and access reports?

The following identity and access reports are available to help you understand application activity in your tenant:

• AD FS application activity
• Application sign-in
• Application user activity (preview)
• Registration and usage

AD FS application activity

The AD FS application activity report provides information about how a relying party is configured with Active Directory Federation Services (AD FS), its aggregated usage, and whether the relying party configuration can be migrated to Microsoft Entra ID. For more information, see the relyingPartyDetailedSummary resource.

Application sign-in

Evaluate the usage of application sign-ins in your tenant using either a summary report or a report that provides details of sign-ins, such as the number of sign-ins and whether any errors occurred during sign-in. For more information, see the applicationSignInSummary resource.

Application user activity (preview)

Application user activity provides sign-in and sign-up user activities data for registered application(s) in a tenant that is configured for Microsoft Entra External ID for customers. You can query and analyze data for daily active users, monthly active users, total users, new users, authentications, requests, and multifactor authentication usage. For more information, see the dailyUserInsightMetricsRoot resource type and monthlyUserInsightMetricsRoot resource type.

Registration and usage

Get a better understanding of how users in your organization use Microsoft Entra capabilities, such as self-service password reset (SSPR) and multifactor authentication (MFA). You can determine which authentication methods are more successful for your organization, what types of errors end users are running into, and what campaign you need to run to help your end users adopt the use of SSPR and MFA. For more information, see the authentication methods usage report API.

Next steps

Reports resources and APIs can open up new ways for you to engage with users and manage their experiences with Microsoft Graph. To learn more:

• Drill down on the methods and properties of the resources most helpful to your scenario.
• Try the API in the Graph Explorer.