Created by Claude - please verify

Partner sign-ins - beta sign-in log filtered on crossTenantAccessType = serviceProvider, 30 days.

Required Microsoft Graph permissions

AuditLog.Read.All CrossTenantInformation.ReadBasic.All (partner names, optional) — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1 (sign-in logs).

Endpoints: GET /beta/auditLogs/signIns?$filter=crossTenantAccessType eq 'serviceProvider' · GET /v1.0/tenantRelationships/findTenantInformationByTenantId

Customer tenants cannot list GDAP relationships through Graph - those APIs are for partners. Review the relationships themselves in the admin centre (Settings > Partner relationships).

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Partner (CSP / GDAP) Admin Sign-ins (30 days)

Cloud Solution Provider partners manage many tenants through granular delegated admin privileges (GDAP). A compromised partner is a compromised customer. This report shows which partner admins actually signed in to your tenant, to which portals and APIs, from where, and whether with MFA.