Created by Claude - please verify

Azure mandatory MFA - 14 days of interactive and non-interactive sign-ins to Azure CLI, Azure PowerShell and Azure Resource Manager (beta sign-in log).

Required Microsoft Graph permissions

AuditLog.Read.All Directory.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1 (sign-in logs).

Endpoints: GET /beta/auditLogs/signIns?$filter=appId eq '04b07795-...' (Azure CLI) · ... appId eq '1950a258-...' (Azure PowerShell) · ... resourceId eq '797f4846-...' (Azure Resource Manager)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Azure Management Sign-ins after Mandatory MFA

Microsoft now enforces MFA for Azure Resource Manager, Azure CLI, Azure PowerShell and infrastructure-as-code tools, and the option to postpone ended on 1 July 2026. User accounts that scripts still use either fail now or sign in with a single factor that will be blocked. Move them to managed identities, service principals or workload identity federation.