AuditLog.Read.All
— application permission, granted to the app registration with admin consent.
Endpoint:
GET /v1.0/reports/authenticationMethods/userRegistrationDetails
Reuses the data behind the MFA & Passwordless Coverage report - no additional Graph call. Disabled accounts are not returned by this endpoint.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
SMS / Voice MFA Retirement Exposure
Microsoft is retiring SMS and voice-call as Microsoft-provided MFA methods. Users whose only second factor is a phone number will be unable to complete MFA once the service ends. Per Microsoft: registration nudges towards passkeys started 1 September 2026, a customer-managed telephony fallback must be configured by 30 October 2026, and Microsoft-provided SMS/voice ends on 1 February 2027. Microsoft announcement.
No authentication method registration data was returned. Please contact support if this is not the expected result.