Created by Claude - please verify

Required Microsoft Graph permissions

Agreement.Read.All AgreementAcceptance.Read.All Policy.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1.

Endpoints: GET /v1.0/identityGovernance/termsOfUse/agreements · GET /v1.0/identityGovernance/termsOfUse/agreements/{id}/acceptances · GET /v1.0/identity/conditionalAccess/policies

Users 'in scope, not accepted' are listed only for policies that target all users (up to 1,000 per agreement); for group-scoped policies only declines and expired acceptances are shown.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Terms of Use Acceptance

Terms of use are an HR and compliance attestation - acceptable use, NDAs, data handling. This report shows each agreement, whether an enabled Conditional Access policy actually requires it, and who declined or whose acceptance expired.