🎉 Our Office 365 Reporting Tool is now available in Azure Marketplace 🚀
This website uses cookies to improve your experience. We'll assume you're ok with this. Know more.
Azure AD

How To Get Azure AD Users Report in Microsoft 365

If your organization's user accounts undergo frequent changes due to regular Microsoft 365 onboarding and offboarding, managing them can be a daunting task. However, you can effectively tackle these challenges by regularly reviewing the list of users in Entra ID. This guide will walk you through exporting user information and implementing best practices for efficient user management.

Using Microsoft 365 Admin Center

Microsoft 365 Permission Required
Global Admin, Global Reader, Groups Admin or User Admin.
  • Sign-in to the Microsoft 365 admin center.
  • Go to Users»Active users.
  • Now, you can export the list of Azure AD users excluding guests by clicking the Export users icon as highlighted below.
Using Microsoft 365 Admin Center

Using Microsoft Entra Admin Center

Microsoft 365 Permission Required
Global Admin, Global Reader, Groups Admin or User Admin.
  • Sign-in to the Microsoft Entra admin center.
  • Go to All Users tab under Identity»Users.
  • Now, you can download a list of users in Azure AD including guests.
Using Microsoft Entra Admin Center

Using Windows PowerShell

Microsoft 365 Permission Required
Global Admin, Global Reader, Groups Admin or User Admin.
  • You can use Microsoft Graph PowerShell to get all Azure AD users.
  • Connect to the Microsoft Graph PowerShell module using this cmdlet.
  • Windows PowerShell Windows PowerShell
     Connect-MgGraph
  • Now, use the below cmdlet to retrieve the list of Microsoft 365 users in your organization along with the additional details like User Id, Display Name, UPN, etc.
  • Windows PowerShell Windows PowerShell
     Get-MgUser
Using Windows PowerShell

The ultimate solution to find all user details in Microsoft Entra ID!

The AdminDroid Microsoft 365 reporting tool offers comprehensive oversight and control of user details such as logon status, license consumptions, MFA details, user activities etc. Not stopping here, AdminDroid goes further by offering a wide range of features for generating automated reports and receiving alerts for any unusual user activities.

Visualize User Data Efficiently

Utilize the Azure AD user dashboard to gain comprehensive insights into user statistics, password status, sign-in status, etc.

Ensure Data Protection with MFA Reports

Use AdminDroid's location-based AI charts to find users without MFA categorized by their city, state and country.

Unlock In-depth User Login Analytics

Learn the ways to find the last logon time of users with a bird's eye view to pinpoint the stale users and manage their licenses effectively.

Track Microsoft 365 Admin activities at Ease

Get the list of all users with admin roles to ensure proper access control and accountability in your Microsoft 365 organization.

Get Automated M365 User Monitoring

AdminDroid's advanced scheduling enables you to send all the user activity logs to their managers to track user actions anywhere at any time.

Obtain Insights on Manager and Direct Reports

Use the dedicated user manager and direct reports to understand the hierarchical structure within your organization. You can download this report in different formats to fit your needs.

AdminDroid gives you a better understanding of user actions and details in Microsoft 365, making it easier for seamless management. Functioning as an Azure Active Directory reporting tool, it assists in making strategic decisions in managing your Microsoft 365 user accounts.

Explore a full range of reporting options

Important Tips

Review and adjust the guest user access restrictions in Microsoft Entra ID for a secure and seamless B2B collaboration.

Restrict user access to Azure AD to enhance the security of your organization's cloud infrastructure.

Manage Microsoft 365 user consent to applications to prevent cyber-attack from malicious phishing applications.

Common Errors and Resolution Steps

The following are errors and troubleshooting hints while checking Microsoft 365 user details.

Error Your account doesn’t have permission to view or manage this page in the Microsoft 365 admin center.

This error occurs if the user does not have administrator privileges to access the admin center URL or admin center.

Fix Please ensure that you possess one of the necessary administrative permissions listed below.
Global Admin, Groups Admin or User Admin.

Error Get-MgUser: Calling principal does not have required MSGraph permissions AuditLog.Read.All

This error occurs when the MS Graph module does not have permission to read the audit log to display the last active time of users.

Fix Connect to the MS Graph PowerShell using the below cmdlet and permit to read Microsoft 365 audit logs.
Connect-MgGraph –Scopes Directory.Read.All,AuditLog.Read.All

Error Remove-MgUser: One or more errors occurred.

This error occurs when you have multiple versions of the Graph PowerShell module installed.

Fix Verify the versions of installed Graph module and uninstall the older versions of Graph module using the below cmdlets.
//To get versions of Graph PowerShell module.
Get-Module -Name Microsoft.Graph -ListAvailable
//To uninstall the older versions of Graph PowerShell module.
$Version=<Version_To_Be_Uninstalled> #Provide the value in quotes
Uninstall-Module -Name "Microsoft.Graph" -RequiredVersion $Version -Force
//Run the below cmdlet to install the latest Microsoft Graph module.
Install-Module Microsoft.Graph

Error You do not have access to this data. Please contact your global administrator to get access.

This error occurs when you try to access Azure AD sign-in logs without necessary admin permission.

Fix Please ensure that you possess one of the necessary administrative permissions listed below.
Global Admin, Security Admin, Security Reader, Global Reader, or Reports Reader.

Error Set-MgUserLicense: User license is inherited from a group membership and it cannot be removed directly from the user.

This happens when you try to remove a license from a Microsoft 365 user that was inherited from a group.

Fix Run the below PowerShell cmdlets to remove the user from the security group from which the license was inherited.
//Connect to the MS Graph PowerShell to give permission to edit group membership details.
Connect-MgGraph -Scopes GroupMember.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All
//Run the below cmdlet to remove a user from the group.
Remove-MgGroupMemberByRef -DirectoryObjectId "<User's Object Id>" -GroupId "<Group's Object Id>"

Frequently Asked Questions

Get a Detailed View of Entra ID Users in Microsoft 365

How to manage users in Microsoft 365?

How to manage users in Microsoft 365? +

It is crucial to audit user-related activities including creations, deletions, and modifications for effective Microsoft 365 user management. However, admins can face significant challenges when tracking multiple users' details and removing inactive users.

Follow the below steps to create, update, and delete users via Microsoft 365 admin center.

Create a new user in Microsoft 365

  • Login to the Microsoft 365 admin center with your admin credentials.
  • Go to Active users under Users tab and select Add user.
  • Fill the user details you wish to add.
  • Select the desired license, role, and click Finish adding to add a user.

Create bulk users in Microsoft 365

  • Navigate to Active users tab, click Add multiple users.
  • Now, you can add the required details like First name, Last name, Username, and Domain.
  • To provide more users' information than admin center, you can upload a CSV file and add users in bulk.
  • Once done, click Next. Then, assign the location, license, and roles.
  • Click Next. Review the user details and click Add users to add multiple users in Microsoft 365.

Update Microsoft 365 user information in bulk

  • Within the Users tab, choose the users you wish to modify. You can then modify the necessary user properties like reset password, manage product licenses, etc, for all those selected users.

Delete a user in Microsoft 365

  • In the same page, select the user you wish to delete.
  • Once you open the user popup, click on Delete user. Then, select whether you want to give the user’s OneDrive access to another user, and finally click on Delete user.
del-user

However, if you delete multiple users at once, you won't be able to grant OneDrive access to others.

AdminDroid simplifies Microsoft 365 user management by offering a range of reports that assist admins in efficiently managing user accounts.

  • Explore the built-in Azure AD reports designed to monitor user activities, identify security risks, and maintain compliance standards.

How to assign a Microsoft 365 license to a user?

How to assign a Microsoft 365 license to a user? +

Assigning licenses allows users to access Microsoft 365 services within your organization. With efficient license monitoring, you can ensure that users have access only to the appropriate resources and services.

You can follow the below steps to assign license via Microsoft 365 admin center.

  • Login to the Microsoft 365 admin center.
  • Navigate to Users»Active users.
  • To assign a license, select the desired user and expand the license section.
  • Then, choose the licenses that you want to assign and then click Save changes.
  • If you want to view the licensed users in your organization, select 'Licensed users' from the filter icon at the top.
license-user

Remove licenses from Microsoft 365 user accounts

Similarly, if you wish to remove a license for a user, simply uncheck the desired licenses and click Save Changes.

Managing licenses and keeping track of their usage from the Microsoft 365 admin center can be difficult as it doesn't offer complete reports on your Office 365 licenses.

To make license management easy, learn how to export Microsoft 365 user license report, that outlines various methods for identifying and managing user licenses.

Here is a quick overview,

  • Using Microsoft 365 Admin Center This approach describes how to get a list of all licensed users in Microsoft 365 along with their licenses.
  • Azure AD PowerShell It provides a PowerShell script to generate & export all licensed users’ display name and licenses assigned to them in Microsoft Entra ID.
  • AdminDroid Azure AD Reporter AdminDroid offers the simplest approach to user license management, providing comprehensive and straightforward reports to monitor Microsoft 365 licenses.

In addition to user license reports, it provides M365 license changes, including license assignment and revoking activity. This ensures the proper license assignment to onboarding users and license removal from offboarding users in the organization.

How to export the list of guest users in Microsoft 365?

How to export the list of guest users in Microsoft 365? +

Guest users are commonly added in Microsoft 365 to enhance external collaboration by expanding business opportunities for organizations. However, lack of effective monitoring of the guest users can result in significant issues such as data leakage, accountability risks, etc. To find the guest users in Azure AD, you can follow the steps below.

  • Login to the Microsoft Entra admin center.
  • Go to the All users section under the Users tab.
  • Now, click Add filter icon and apply the filter User type == Guest.
  • Now, you can find all the guest users added to your organization. You can click Download users to export a list of all guest users in your organization.
guest-entra

Additionally, you can click on the desired guest user and navigate to the Groups tab to find the details of the external users group membership details.

AdminDroid offers dedicated reports to manage guest users in Microsoft 365 and remove unnecessary guests from confidential groups.

AdminDroid’s built-in external user reports consists of,

  • Internal guest user list: Monitor a list of users from other organizations who can access your Office 365 resources.
  • Guest user creation & deletion: Track the guest users creation and deletion activities in your organization.
  • Guest user’s group membership: Identify guest users with their group memberships, and remove unnecessary guests from confidential groups.
  • External user’s activity monitoring: Monitor all the actions carried out by guest users, such as accessing SharePoint files and sharing files or folders with internal users.
  • Guest’s mailbox permission monitoring: Identify all the Exchange Online mailboxes to which the guest users have access.

How to audit user activity in Microsoft 365?

How to audit user activity in Microsoft 365? +

To keep user accounts safe from suspicious activities, it is important to regularly check user details like account changes, file sharing, password changes, and role modifications. Follow the steps below to track user activities using the Microsoft 365 audit logs:

  • Login to the Microsoft 365 Purview portal.
  • Navigate to the Audit section.
  • Now, apply filters to specify user activities based on criteria such as date range, users, types of activities, and more.

After clicking Search, you will receive the results of the activities performed. Export the Microsoft 365 user activity report to track the events performed by the users.

audit-change

Even though you can export the activities performed by the users, it will be difficult to categorize them efficiently in Microsoft Purview. Fortunately, AdminDroid simplifies this process, saving you time and effort.

It offers a detailed Microsoft 365 user audit report where you can easily track all activities performed by users. It provides details, such as users' first login time, last logon time, activities across various Microsoft 365 apps and services.

  • Furthermore, make use of the built-in advanced alerting system, so that you can always be aware of the crucial activities performed by the users.
all-activity

How to find inactive users in Microsoft 365?

How to find inactive users in Microsoft 365? +

Even though a user account becomes inactive, they continue to utilize a license in your organization, leading to wastage of licenses. By periodically monitoring inactive users in Azure AD, you can optimize resource usage and reduce unnecessary costs.

Check Users' Last Logon Time in Azure Active Directory

  • Go to the Microsoft Entra admin center.
  • Navigate to Sign-in logs under Identity»Monitoring & Health. Here, you can filter the desired user's last logon history along with other properties like sign-in status, IP address, signed-in application, etc.

last-sign

Get Last Logon Time of Office 365 Users using PowerShell

Connect to the ‘Microsoft Graph’ PowerShell module and run the below command to retrieve Microsoft 365 users' last logon time with precise information.

Get-MgUser -UserId <UserId> -Property SigninActivity | select -ExpandProperty SigninActivity 

Take a look at AdminDroid’s Microsoft 365 inactive users report for a detailed overview to easily find and manage inactive users within your Microsoft 365 environment.

Along with the users' last logon time, it offers details regarding issues related to inactive users, instructions on identifying inactive users, revoking their licenses, and deleting their accounts.

+

Kickstart Your Journey With
AdminDroid

Your Microsoft 365 Companion with Enormous Reporting Capabilities

Download Now
User Help Manuals Compliance Docs
x
Delivering Reports on Time
Want a desired Microsoft 365 reports every Monday morning? Ensure automated report distribution and timely delivery with AdminDroid's Scheduling to your email anytime you need.
Delivering Reports on Time
Schedule tailored reports to execute automatically at the time you set and deliver straight to the emails you choose. In addition, you can customize report columns and add inteligent filtering to the activities just from the previous day to suit your Microsoft 365 report requirements.
Set It, Schedule It, See Results- Your Reports, Your Way, On Your Time!
Time Saving
Automation
Customization
Intelligent Filtering
Give Just the Right Access to the Right People
Grant fine-tuned access to any Microsoft 365 user with AdminDroid’s Granular Delegation and meet your organization’s security and compliance requirements.
Give Just the Right Access to the Right People
Create custom roles loaded with just the right permissions and give access to admins or normal users within AdminDroid. The result? A streamlined Microsoft 365 management experience that aligns your organization's security protocols and saves your invaluable time and effort.
Align, Define, Simplify: AdminDroid's Granular Delegation
Smart Organizational Control
Effortless M365 Management
Simplified Access
Advanced Alerts at a Glance
Receive quick notifications for malicious Microsoft 365 activities. Engage with the AdminDroid’s real-time alert policies crafted to streamline your security investigations.
Advanced Alerts at a Glance
Stay informed of critical activities like suspicious emails and high-risk logins, bulk file sharing, etc. Through creating and validating ideal alert policies, AdminDroid provides a comprehensive approach to real-time monitoring and management of potential threats within your organization.
AdminDroid Keeps You Always Vigilant, Never Vulnerable!
Proactive Protection
Real-time Monitoring
Security Intelligence
Threat Detection
Merge the Required Data to One Place
Combine multiple required columns into one comprehensive report and prioritize the information that matters most to you with AdminDroid’s Advanced Column Customization.
Merge the Required Data to One Place
This column merging capability offers a flexible way to add different columns from various reports and collate all the essential data in one place. Want to revisit the customized report? Save it as a 'View’, and your unique report is ready whenever you need it.
Merge with Ease and Save as Views!
Custom Reporting
Unique View
Desired Columns
Easy Data Interpretation
Insightful Charts and Exclusive Dashboards
Get a quick and easy overview of your tenant's activity, identify potential problems, and take action to protect your data with AdminDroid’s Charts and Dashboards.
Insightful Charts and Exclusive Dashboards
With AdminDroid charts and dashboards, visualize your Microsoft 365 tenant in ways you've never thought possible. It's not just about viewing; it's about understanding, controlling, and transforming your Microsoft 365 environment.
Explore Your Microsoft 365 Tenant in a Whole New Way!
Executive overviews
Interactive insights
Decision-making
Data Visualization
Efficient Report Exporting for Microsoft 365
Downloading your reports in the right file format shouldn’t be a hassle with AdminDroid’s Report Export. Experience seamless report exporting in various formats that cater to your needs.
Efficient Report Exporting for Microsoft 365
Navigate through diverse options and export Microsoft 365 reports flawlessly in your desired file format. Tailor your reports precisely as you need them and save them directly to your computer.
Take Control, Customize and Deliver- Your Office 365 Data, Exported in Your Way!
Easy Export
Seamless Downloading
Data Control
Manage Microsoft 365

Get AdminDroid Office 365 Reporter Now!