Skip to content

New command: Retrieve the Azure AD user sign-ins for your tenant #2910

@garrytrinder

Description

@garrytrinder

Usage

aad user signin list

Description

Retrieves the Azure AD user sign-ins for your tenant

Options

Option Description
--userId [userId] Filter the user sign ins by the given user id. Specify either userName or userId
-n, --userName [userName] Filter the user sign ins by the given user name. Specify either userName or userId
--appDisplayName [appDisplayName] Filter the user sign ins by the given application display name. Specify either appDisplayName or appId
--appId [appId] Filter the user sign ins by the given application identifier. Specify either appDisplayName or appId

Additional Info

AuditLog.Read.All and Directory.Read.All permissions are required as well as one of the following roles assigned to be able to return information from the API.

  • Global Administrator
  • Global Reader
  • Reports Reader
  • Security Administrator
  • Security Operator
  • Security Reader

You must also have an Azure AD Premium P1 or P2 license to download sign-in logs using the Microsoft Graph API, otherwise the following error will be thrown.

{
    "error": {
        "code": "Authentication_RequestFromNonPremiumTenantOrB2CTenant",
        "message": "Neither tenant is B2C or tenant doesn't have premium license",
        "innerError": {
            "date": "2022-01-03T07:47:09",
            "request-id": "e1df55d2-b5a5-4221-820e-8a63b0644c96",
            "client-request-id": "0ee12284-1485-0ccc-8e6a-20b6a7aa0b09"
        }
    }
}

Documentation: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions