Created by Claude - please verify

MFA coverage - verify the admin count against the Entra portal before acting on it.

Required Microsoft Graph permissions

AuditLog.Read.All — application permission, granted to the app registration with admin consent.

Endpoint: GET /v1.0/reports/authenticationMethods/userRegistrationDetails

Disabled accounts are never returned by this endpoint, so they cannot appear in the counts below.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

MFA & Passwordless Coverage

Which accounts can actually perform multifactor authentication, and which administrators cannot. Source: Microsoft Graph reports/authenticationMethods/userRegistrationDetails. Disabled accounts are not returned by this endpoint, so they never appear below.

No authentication method registration data was returned. Please contact support if this is not the expected result.