Reports.Read.All
User.Read.All
— application permissions, granted to the app registration with admin consent.
Endpoints:
GET /v1.0/reports/getOffice365ActiveUserDetail(period='D90') · GET /v1.0/users
If 'Display concealed user, group, and site names in all reports' is on in the Microsoft 365 admin center, users cannot be matched and links will not work.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Licence vs Actual Service Usage
Who is licensed for Exchange, OneDrive, SharePoint and Teams but used none of them in 90 days, and who pays for a full suite but only reads email - candidates for removal or for a cheaper plan.
The usage report returned no licensed users. Please contact support if this is not the expected result.