Created by Claude - please verify

Unmanaged device sign-ins - device state as reported in the sign-in log; browsers without the Microsoft SSO extension report devices as unmanaged.

Required Microsoft Graph permissions

AuditLog.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1.

Endpoint: GET /beta/auditLogs/signIns (7 days)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Sign-ins from Unmanaged & Non-compliant Devices

Which applications people successfully reach from devices your organisation does not manage, or manages but considers non-compliant. Apps high on this list are where 'require compliant device' or app-enforced restrictions would change the most - and where data most easily lands on private hardware.

No successful sign-in from an unmanaged or non-compliant device in the last 7 days.