User.Read.All
AuditLog.Read.All
— application permissions, granted to the app registration with admin consent.
Licence: Microsoft Entra ID P1 for the activity columns. Domains and pending invitations work without it.
Endpoints:
GET /v1.0/users · GET /v1.0/users?$select=signInActivity
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Guest Domains & Pending Invitations
Which organisations you actually collaborate with, how many of their guests are still active, and which invitations were never accepted. A pending invitation is a live, redeemable link into the tenant for whoever holds the invite mail.
This tenant has no guest accounts.