Created by Claude - please verify

Guest lifecycle - group membership counts come from the cached group data, which currently truncates at 20 members per group.

Required Microsoft Graph permissions

AuditLog.Read.All Directory.Read.All User.Read.All Group.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1 - required for sign-in activity. Without it guests are still listed, but 'last activity' and the stale buckets stay empty.

Endpoints: GET /v1.0/users?$select=signInActivity · GET /v1.0/groups

No Graph call is made when you open this page - it is a join over data already in the cache.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Guest Lifecycle

Every guest account with how long it has existed, when it was last used, and how much it can still reach through group and team membership. Built from cached users, groups and sign-in activity.

There are no guest accounts. Please contact support if this is not the expected result.