Created by Claude - please verify

Entra recommendations - read from a beta Graph API; Microsoft adds and retires recommendations over time.

Required Microsoft Graph permissions

DirectoryRecommendations.Read.All — application permission, granted to the app registration with admin consent.

Endpoints: GET /beta/directory/recommendations · GET /beta/directory/recommendations/{id}/impactedResources

Some recommendations are only generated with Entra ID P1/P2.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Microsoft Entra Recommendations

Microsoft checks every tenant daily against its identity best practices and publishes the result as recommendations - renew expiring app credentials, remove unused apps, migrate from legacy MFA, and so on. This page lists them with how many objects each one affects.

Microsoft has no recommendations for this tenant.