This website uses cookies to improve your experience. We'll assume you're ok with this. Know more.

How To Get Azure AD Users Report in Microsoft 365

If your organization's user accounts undergo frequent changes due to regular Microsoft 365 onboarding and offboarding, managing them can be a daunting task. However, you can effectively tackle these challenges by regularly reviewing the list of users in Entra ID. This guide will walk you through exporting user information and implementing best practices for efficient user management.

Native Solution

Microsoft 365 Permission Required

High

Global Admin, Global Reader, Groups Admin or User Admin.

Option 1 Using Microsoft 365 Admin Center

  • Sign-in to the Microsoft 365 admin center.
  • Go to Users»Active users.
  • Now, you can export the list of Azure AD users excluding guests by clicking the Export users icon as highlighted below.
Using Microsoft 365 Admin Center

Option 2 Using Microsoft Entra Admin Center

  • Sign-in to the Microsoft Entra admin center.
  • Go to All Users tab under Identity»Users.
  • Now, you can download a list of users in Azure AD including guests.
Using Microsoft Entra Admin Center

Option 2 Using Windows PowerShell

  • You can use Microsoft Graph PowerShell to get all Azure AD users.
  • Connect to the Microsoft Graph PowerShell module using this cmdlet.
  • Windows PowerShell Windows PowerShell 
     Connect-MgGraph
  • Now, use the below cmdlet to retrieve the list of Microsoft 365 users in your organization along with the additional details like User Id, Display Name, UPN, etc.
  • Windows PowerShell Windows PowerShell 
     Get-MgUser
Using Windows PowerShell
AdminDroid Solution
This report and 150+ more reports are under free editionFREE

AdminDroid Permission Required

Delegated

Any user with report access delegated by the Super Admin.

StepsUsing AdminDroid

Free
ad
  • Login to the AdminDroid Office 365 portal.
  • Navigate to All Users report under Reports»Azure AD»User Reports.
Using AdminDroid

Export Microsoft 365 Entra ID users with all properties like sign-in status, license assigned, group details, etc.

chart
  • Make use of AdminDroid's advanced charts to obtain a visual representation of Microsoft 365 users with admin roles.
geo-map
birds-eye-chart
donut
exported-excel
pie-chart
alert
Explore a full range of reporting options

Streamline your Microsoft 365 user management!

Overcome the challenges of managing multiple users! AdminDroid simplifies user management with its Microsoft 365 user reports.

Witness the report in action using the

Live Demo

Azure ADGet a Detailed View of Entra ID Users in Microsoft 365

Showing 1 of 5
How to manage users in Microsoft 365? How to assign a Microsoft 365 license to a user? How to export the list of guest users in Microsoft 365? How to audit user activity in Microsoft 365? How to find inactive users in Microsoft 365?

How to manage users in Microsoft 365?

It is crucial to audit user-related activities including creations, deletions, and modifications for effective Microsoft 365 user management. However, admins can face significant challenges when tracking multiple users' details and removing inactive users.

Follow the below steps to create, update, and delete users via Microsoft 365 admin center.

Create a new user in Microsoft 365

  • Login to the Microsoft 365 admin center with your admin credentials.
  • Go to Active users under Users tab and select Add user.
  • Fill the user details you wish to add.
  • Select the desired license, role, and click Finish adding to add a user.

Create bulk users in Microsoft 365

  • Navigate to Active users tab, click Add multiple users.
  • Now, you can add the required details like First name, Last name, Username, and Domain.
  • To provide more users' information than admin center, you can upload a CSV file and add users in bulk.
  • Once done, click Next. Then, assign the location, license, and roles.
  • Click Next. Review the user details and click Add users to add multiple users in Microsoft 365.

Update Microsoft 365 user information in bulk

  • Within the Users tab, choose the users you wish to modify. You can then modify the necessary user properties like reset password, manage product licenses, etc, for all those selected users.

Delete a user in Microsoft 365

  • In the same page, select the user you wish to delete.
  • Once you open the user popup, click on Delete user. Then, select whether you want to give the user’s OneDrive access to another user, and finally click on Delete user.
del-user

However, if you delete multiple users at once, you won't be able to grant OneDrive access to others.

AdminDroid simplifies Microsoft 365 user management by offering a range of reports that assist admins in efficiently managing user accounts.

  • Explore the built-in Azure AD reports designed to monitor user activities, identify security risks, and maintain compliance standards.

How to assign a Microsoft 365 license to a user?

Assigning licenses allows users to access Microsoft 365 services within your organization. With efficient license monitoring, you can ensure that users have access only to the appropriate resources and services.

You can follow the below steps to assign license via Microsoft 365 admin center.

  • Login to the Microsoft 365 admin center.
  • Navigate to Users»Active users.
  • To assign a license, select the desired user and expand the license section.
  • Then, choose the licenses that you want to assign and then click Save changes.
  • If you want to view the licensed users in your organization, select 'Licensed users' from the filter icon at the top.
license-user

Remove licenses from Microsoft 365 user accounts

Similarly, if you wish to remove a license for a user, simply uncheck the desired licenses and click Save Changes.

Managing licenses and keeping track of their usage from the Microsoft 365 admin center can be difficult as it doesn't offer complete reports on your Office 365 licenses.

To make license management easy, learn how to export Microsoft 365 user license report, that outlines various methods for identifying and managing user licenses.

Here is a quick overview,

  • Using Microsoft 365 Admin Center This approach describes how to get a list of all licensed users in Microsoft 365 along with their licenses.
  • Azure AD PowerShell It provides a PowerShell script to generate & export all licensed users’ display name and licenses assigned to them in Microsoft Entra ID.
  • AdminDroid Azure AD Reporter AdminDroid offers the simplest approach to user license management, providing comprehensive and straightforward reports to monitor Microsoft 365 licenses.

In addition to user license reports, it provides M365 license changes, including license assignment and revoking activity. This ensures the proper license assignment to onboarding users and license removal from offboarding users in the organization.

How to export the list of guest users in Microsoft 365?

Guest users are commonly added in Microsoft 365 to enhance external collaboration by expanding business opportunities for organizations. However, lack of effective monitoring of the guest users can result in significant issues such as data leakage, accountability risks, etc. To find the guest users in Azure AD, you can follow the steps below.

  • Login to the Microsoft Entra admin center.
  • Go to the All users section under the Users tab.
  • Now, click Add filter icon and apply the filter User type == Guest.
  • Now, you can find all the guest users added to your organization. You can click Download users to export a list of all guest users in your organization.
guest-entra

Additionally, you can click on the desired guest user and navigate to the Groups tab to find the details of the external users group membership details.

AdminDroid offers dedicated reports to manage guest users in Microsoft 365 and remove unnecessary guests from confidential groups.

AdminDroid’s built-in external user reports consists of,

  • Internal guest user list: Monitor a list of users from other organizations who can access your Office 365 resources.
  • Guest user creation & deletion: Track the guest users creation and deletion activities in your organization.
  • Guest user’s group membership: Identify guest users with their group memberships, and remove unnecessary guests from confidential groups.
  • External user’s activity monitoring: Monitor all the actions carried out by guest users, such as accessing SharePoint files and sharing files or folders with internal users.
  • Guest’s mailbox permission monitoring: Identify all the Exchange Online mailboxes to which the guest users have access.

How to audit user activity in Microsoft 365?

To keep user accounts safe from suspicious activities, it is important to regularly check user details like account changes, file sharing, password changes, and role modifications. Follow the steps below to track user activities using the Microsoft 365 audit logs:

  • Login to the Microsoft 365 Purview portal.
  • Navigate to the Audit section.
  • Now, apply filters to specify user activities based on criteria such as date range, users, types of activities, and more.

After clicking Search, you will receive the results of the activities performed. Export the Microsoft 365 user activity report to track the events performed by the users.

audit-change

Even though you can export the activities performed by the users, it will be difficult to categorize them efficiently in Microsoft Purview. Fortunately, AdminDroid simplifies this process, saving you time and effort.

It offers a detailed Microsoft 365 user audit report where you can easily track all activities performed by users. It provides details, such as users' first login time, last logon time, activities across various Microsoft 365 apps and services.

  • Furthermore, make use of the built-in advanced alerting system, so that you can always be aware of the crucial activities performed by the users.
all-activity

How to find inactive users in Microsoft 365?

Even though a user account becomes inactive, they continue to utilize a license in your organization, leading to wastage of licenses. By periodically monitoring inactive users in Azure AD, you can optimize resource usage and reduce unnecessary costs.

Check Users' Last Logon Time in Azure Active Directory

  • Go to the Microsoft Entra admin center.
  • Navigate to Sign-in logs under Identity»Monitoring & Health. Here, you can filter the desired user's last logon history along with other properties like sign-in status, IP address, signed-in application, etc.

last-sign

Get Last Logon Time of Office 365 Users using PowerShell

Connect to the ‘Microsoft Graph’ PowerShell module and run the below command to retrieve Microsoft 365 users' last logon time with precise information. 

Get-MgUser -UserId <UserId> -Property SigninActivity | select -ExpandProperty SigninActivity

Take a look at AdminDroid’s Microsoft 365 inactive users report for a detailed overview to easily find and manage inactive users within your Microsoft 365 environment.

Along with the users' last logon time, it offers details regarding issues related to inactive users, instructions on identifying inactive users, revoking their licenses, and deleting their accounts.

AdminDroid Microsoft 365 User Reporting ToolThe ultimate solution to find all user details in Microsoft Entra ID!

The AdminDroid Microsoft 365 reporting tool offers comprehensive oversight and control of user details such as logon status, license consumptions, MFA details, user activities etc. Not stopping here, AdminDroid goes further by offering a wide range of features for generating automated reports and receiving alerts for any unusual user activities.

AdminDroid's advanced capabilities for Microsoft 365 user management:

AdminDroid's All Users report offers a deep insight on Microsoft 365 users, including their sign-in status, presence of external and internal guest users, and more. This report assists admins to access and verify all user details within the organization effortlessly.

A Quick Summary

Visualize User Data Efficiently

Utilize the Azure AD user dashboard to gain comprehensive insights into user statistics, password status, sign-in status, etc.

Ensure Data Protection with MFA Reports

Use AdminDroid's location-based AI charts to find users without MFA categorized by their city, state and country.

Unlock In-depth User Login Analytics

Learn the ways to find the last logon time of users with a bird's eye view to pinpoint the stale users and manage their licenses effectively.

Track Microsoft 365 Admin activities at Ease

Get the list of all users with admin roles to ensure proper access control and accountability in your Microsoft 365 organization.

Get Automated M365 User Monitoring

AdminDroid's advanced scheduling enables you to send all the user activity logs to their managers to track user actions anywhere at any time.

Obtain Insights on Manager and Direct Reports

Use the dedicated user manager and direct reports to understand the hierarchical structure within your organization. You can download this report in different formats to fit your needs.

AdminDroid gives you a better understanding of user actions and details in Microsoft 365, making it easier for seamless management. Functioning as an Azure Active Directory reporting tool, it assists in making strategic decisions in managing your Microsoft 365 user accounts.

Kickstart Your Journey with AdminDroid

Your Microsoft 365 Companion with Enormous Reporting Capabilities!

Download

Common Errors and Resolution Steps while checking Microsoft 365 user details

The following are errors and troubleshooting hints while checking Microsoft 365 user details.

Error: Your account doesn’t have permission to view or manage this page in the Microsoft 365 admin center.

This error occurs if the user does not have administrator privileges to access the admin center URL or admin center.

Troubleshooting hint :Please ensure that you possess one of the necessary administrative permissions listed below.

Global Admin, Groups Admin or User Admin.

Error: Get-MgUser: Calling principal does not have required MSGraph permissions AuditLog.Read.All

This error occurs when the MS Graph module does not have permission to read the audit log to display the last active time of users.

Troubleshooting hint :Connect to the MS Graph PowerShell using the below cmdlet and permit to read Microsoft 365 audit logs. 

Connect-MgGraph –Scopes Directory.Read.All,AuditLog.Read.All

Error: Remove-MgUser: One or more errors occurred.

This error occurs when you have multiple versions of the Graph PowerShell module installed.

Troubleshooting hint :Verify the versions of installed Graph module and uninstall the older versions of Graph module using the below cmdlets. 

//To get versions of Graph PowerShell module.
Get-Module -Name Microsoft.Graph -ListAvailable
//To uninstall the older versions of Graph PowerShell module.
$Version=<Version_To_Be_Uninstalled> #Provide the value in quotes
Uninstall-Module -Name "Microsoft.Graph" -RequiredVersion $Version -Force
//Run the below cmdlet to install the latest Microsoft Graph module.
Install-Module Microsoft.Graph

Error: You do not have access to this data. Please contact your global administrator to get access.

This error occurs when you try to access Azure AD sign-in logs without necessary admin permission.

Troubleshooting hint :Please ensure that you possess one of the necessary administrative permissions listed below.

Global Admin, Security Admin, Security Reader, Global Reader, or Reports Reader.

Error: Set-MgUserLicense: User license is inherited from a group membership and it cannot be removed directly from the user.

This happens when you try to remove a license from a Microsoft 365 user that was inherited from a group.

Troubleshooting hint :Run the below PowerShell cmdlets to remove the user from the security group from which the license was inherited. 

//Connect to the MS Graph PowerShell to give permission to edit group membership details.
Connect-MgGraph -Scopes GroupMember.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All
//Run the below cmdlet to remove a user from the group.
Remove-MgGroupMemberByRef -DirectoryObjectId "<User's Object Id>" -GroupId "<Group's Object Id>"