Created by Claude - please verify

SSPR registration gaps - based on Microsoft's registration report, which can lag real registrations by up to a day.

Required Microsoft Graph permissions

AuditLog.Read.All — application permission, granted to the app registration with admin consent.

Licence: Self-service password reset for cloud users is included in Microsoft 365; writeback to on-premises AD needs Entra ID P1.

Endpoint: GET /v1.0/reports/authenticationMethods/userRegistrationDetails

Reuses the data behind the MFA & Passwordless Coverage report - no additional Graph call. Disabled accounts are not returned.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Self-service Password Reset Gaps

Users who cannot reset their own password end up on the phone with the helpdesk - where social engineering happens. This report separates users the SSPR policy does not cover from users it covers who never registered a reset method.

No authentication method registration data was returned. Please contact support if this is not the expected result.