Usage
aad user signin list
Description
Retrieves the Azure AD user sign-ins for your tenant
Options
| Option |
Description |
--userId [userId] |
Filter the user sign ins by the given user id. Specify either userName or userId |
-n, --userName [userName] |
Filter the user sign ins by the given user name. Specify either userName or userId |
--appDisplayName [appDisplayName] |
Filter the user sign ins by the given application display name. Specify either appDisplayName or appId |
--appId [appId] |
Filter the user sign ins by the given application identifier. Specify either appDisplayName or appId |
Additional Info
AuditLog.Read.All and Directory.Read.All permissions are required as well as one of the following roles assigned to be able to return information from the API.
- Global Administrator
- Global Reader
- Reports Reader
- Security Administrator
- Security Operator
- Security Reader
You must also have an Azure AD Premium P1 or P2 license to download sign-in logs using the Microsoft Graph API, otherwise the following error will be thrown.
{
"error": {
"code": "Authentication_RequestFromNonPremiumTenantOrB2CTenant",
"message": "Neither tenant is B2C or tenant doesn't have premium license",
"innerError": {
"date": "2022-01-03T07:47:09",
"request-id": "e1df55d2-b5a5-4221-820e-8a63b0644c96",
"client-request-id": "0ee12284-1485-0ccc-8e6a-20b6a7aa0b09"
}
}
}
Documentation: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http
Usage
aad user signin listDescription
Retrieves the Azure AD user sign-ins for your tenantOptions
--userId [userId]userNameoruserId-n, --userName [userName]userNameoruserId--appDisplayName [appDisplayName]appDisplayNameorappId--appId [appId]appDisplayNameorappIdAdditional Info
AuditLog.Read.AllandDirectory.Read.Allpermissions are required as well as one of the following roles assigned to be able to return information from the API.You must also have an Azure AD Premium P1 or P2 license to download sign-in logs using the Microsoft Graph API, otherwise the following error will be thrown.
{ "error": { "code": "Authentication_RequestFromNonPremiumTenantOrB2CTenant", "message": "Neither tenant is B2C or tenant doesn't have premium license", "innerError": { "date": "2022-01-03T07:47:09", "request-id": "e1df55d2-b5a5-4221-820e-8a63b0644c96", "client-request-id": "0ee12284-1485-0ccc-8e6a-20b6a7aa0b09" } } }Documentation: https://docs.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http