Created by Claude - please verify

Contractors - members marked as contractor/vendor/intern (employeeType) or from another company, with leave date, sponsors and access-package expiry.

Required Microsoft Graph permissions

User.Read.All User-LifeCycleInfo.Read.All EntitlementManagement.Read.All (optional) — application permissions, granted to the app registration with admin consent.

Licence: None; access package expiry needs Entra ID Governance.

Endpoints: GET /v1.0/users?$select=employeeType,companyName,employeeLeaveDateTime · GET /v1.0/users/{id}/sponsors ($batch) · GET /v1.0/identityGovernance/entitlementManagement/assignments

'Another company' means a companyName different from the most common companyName among enabled members.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Contractors & Externals without an End Date

Contractors and vendor staff often get normal member accounts that nothing ever ends: no leave date, no expiring access package, no sponsor who would notice. When the contract ends, the account stays - with its access.