AuditLog.Read.All
User.Read.All
Organization.Read.All
— application permissions, granted to the app registration with admin consent.
Licence: Microsoft Entra ID P1 (sign-in logs).
Endpoints:
GET /v1.0/subscribedSkus · GET /v1.0/users (cached, assignedLicenses) · GET /beta/auditLogs/signIns?$filter=startswith(appDisplayName,'...') / startswith(resourceDisplayName,'...')
Sign-ins are matched on app and resource display names. Desktop Visio and Project can sign in as generic Office apps, so a missing sign-in is a strong hint, not proof - confirm with the user before removing the licence.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Add-on Licences with No Product Sign-in (30 days)
Add-on licences are bought per user and rarely reviewed. The Microsoft 365 usage reports do not cover Visio, Project, Power BI or Power Apps per-user plans, so License Usage cannot see them. This report compares who holds each add-on with who actually signed in to the product in the last 30 days.
Loading...