Microsoft Entra ID

How to Get Employee Information Report in Microsoft 365

Did you know that inaccurate employee information in Microsoft 365 is one of the biggest hidden security threats in growing organizations? Outdated employee records often lead to stale permissions and access issues, which directly impact your dynamic groups and lifecycle workflows. Therefore, it is essential to validate employee details to maintain accuracy and reduce security risks. This guide explains how to retrieve the employee information report in Microsoft 365.

View Employee Details Using Microsoft Entra Admin Center

Microsoft Permission Required

Report Reader Least Privilege

Global Admin Most Privilege

Log in to the Microsoft Entra admin center.
Navigate to Entra ID»Users»All users.
Select the Manage view option from the top and choose Edit columns.
Use Add column option to add the required employee information columns such as Department, Employee ID, Employee type, Job title, Employee org data, Employee hire date, City, etc.
Click Save to apply the customized table view, which displays employee details in a structured format for easier identity management.

View Employee Details Using Microsoft Entra Admin Center

Export Employee Information from Microsoft 365 Using PowerShell

Microsoft Graph Permission Required

User.Read.All and User-LifeCycleInfo.Read.All Least Privilege

Directory.ReadWrite.All and User-LifeCycleInfo.ReadWrite.All Most Privilege

Connect to Microsoft Graph PowerShell with the following cmdlet.

Windows PowerShell

 Connect-MgGraph -Scopes "User.Read.All", "User-LifeCycleInfo.Read.All"

Run the following cmdlet, replacing <OutputFilePath> with the file path where you want to export your Microsoft 365 employee information report.

Windows PowerShell

 Get-MgBetaUser -All | ForEach-Object {
    $licenses = Get-MgUserLicenseDetail -UserId $_.Id  
    $_ | Select-Object DisplayName, UserPrincipalName, EmployeeId, EmployeeHireDate, EmployeeLeaveDateTime, City, Department, JobTitle, CompanyName, EmployeeType,
        @{Name='Licenses'; Expression = { $licenses.SkuPartNumber -join ', ' }}
} | Export-Csv -Path "<OutputFilePath>" -NoTypeInformation

The exported CSV file contains employee attributes, including display name, user principal name, employee ID, hire date, leave date, city, department, job title, company name, employee type, and assigned licenses.

Export Employee Information from Microsoft 365 Using PowerShell

Simple & Quick
Get M365 Employee Information Report Using AdminDroid

AdminDroid Permission Required Delegated

Any user with report access delegated by Super Admin

Log in to AdminDroid 365 Portal.
Navigate to the Employee Information report under Reports»Entra»Insights»User Analysis Reports.
This report provides organization's employees data in Entra ID including employee ID, department, hire date, leave date time, sign-in status, and more.
Use the Column Customization option to add other employee organizational data fields, such as Cost Center, Employee Division, City, etc., based on your requirements.

Get M365 Employee Information Report Using AdminDroid

AdminDroid Microsoft 365 Entra ID Reporter

Gain Complete Visibility into Employee Information Across Microsoft 365!

AdminDroid's Microsoft 365 user reporting tool provides complete visibility into employee details to support proactive management. Below are the extensive capabilities of the tool that enable admins to seamlessly monitor and manage employee data in Microsoft 365.

List Microsoft 365 Users with Group Membership Details

Get a complete view of employees and their group memberships in your Microsoft 365 organization to simplify access reviews and enforce role-based access control.

Find M365 Users with Weak Passwords to Minimize Security Risks

Identify Microsoft 365 users with weak passwords to stay ahead of security threats and reduce the risk of account compromise.

Uncover Microsoft 365 Organizational Hierarchy at a Glance

Visualize the M365 employee organizational structure hierarchy through managers and direct reports to optimize access control and strengthen audit readiness.

Monitor M365 Activities Performed by Guest Users

Track external user activities performed by partners, contractors, and guest users to manage M365 permissions and protect organizational data.

Refine Microsoft 365 License Allocation Using Employee Data

Optimize Microsoft 365 license management effortlessly with the recoverable license report to reclaim unused M365 licenses from disabled user accounts and reassign them with precision.

Detect Employee Account Validation Issues in Entra ID

Schedule the employee validation error report to speed up Microsoft 365 troubleshooting and reduce service disruptions caused by Entra ID provisioning errors and indirect license conflicts.

In summary, AdminDroid simplifies Microsoft 365 employee management by delivering actionable insights that help administrators strengthen security, optimize access control, and manage user accounts efficiently.

Explore a full range of reporting options

Download Live Demo

Important tips

Regularly review your Microsoft Secure Score reports to identify potential risks impacting employee accounts and bolster overall security posture.

Protect employee personal data with strong M365 security best practices, as basic security measures alone are no longer enough to stop evolving threats like spear phishing, ransomware, and identity-based attacks.

Create user templates in Microsoft Entra ID to standardize employee information during account creation for large-scale hiring or role-based provisioning.

Common Errors and Resolution Steps

Here are some common errors and troubleshooting tips while working with employee information in Microsoft 365

Error Get-MgBetaUser: The term 'Get-MgBetaUser' is not recognized as the name of a cmdlet, function, script file, or operable program.

This error occurs while executing the 'Get-mgBetaUser' cmdlet without having the Microsoft Graph beta PowerShell modules installed.

Fix To resolve this issue, install the Microsoft Graph beta module using the following command.

Install-Module Microsoft.Graph.Beta -Scope CurrentUser -Force

Error Connect-MgGraph: The 'Connect-MgGraph' command was found in the module 'Microsoft. Graph.Authentication', but the module could not be loaded.

This error occurs when the execution policy is set to restricted or undefined, which prevents PowerShell from loading Microsoft Graph modules.

Fix To resolve this, run the following cmdlet to set the execution policy to RemoteSigned.

Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned -Force

Error You don't have access {"sessionId":"f8ed8cdd73a947ef8763bde4448e4d11","subscriptionId":"","resourceGroup":"","errorCode":"401","resourceName":"","details":"Error loading your content"}

This error appears in the Entra admin center when a user lacks the essential privilege or license to access Lifecycle Workflows

Fix To resolve the issue, assign the user with at least the Lifecycle Workflows Administrator role and ensure the user has the Microsoft Entra ID Governance license assigned.

Microsoft Entra ID

Frequently Asked Questions

Empower Your Workforce with Smarter Employee Information Management in Microsoft 365

How to configure employee hire date time and employee leave date time in Microsoft 365?

How to automate employee onboarding & offboarding using Microsoft Entra ID lifecycle workflows?

How to define custom security attributes in Microsoft Entra ID to enhance employee information?

What are the benefits of integrating employee details into Microsoft 365?

1. How to configure employee hire date time and employee leave date time in Microsoft 365?

Setting up the employee hire date time and employee leave date time in Microsoft Entra ID is essential for automating identity lifecycle processes. These attributes serve as the foundation for Lifecycle Workflows, allowing you to efficiently manage onboarding, offboarding, access reviews, and policy-based access expiration without manual intervention.

Configure employee hire date using Entra admin center

Navigate to Microsoft Entra admin center»Entra ID»Users»All users.
Click on the user you want to update and select Edit properties.
Update the hire date in the Employee hire date field and click Save.

Note:The employee leave date cannot be configured in the Microsoft Entra admin center. Additionally, the UI does not allow you to specify the exact time, as it is limited to the date only.

Update employee hire date and leave date using PowerShell

Connect to Microsoft graph using the below cmdlet.

Connect-MgGraph -Scopes "User.ReadWrite.All","User-LifeCycleInfo.ReadWrite.All"

Run the following PowerShell cmdlet to configure an employee's hire date and leave date.

Update-MgUser -UserId "<User’s UPN>" -EmployeeHireDate "<YYYY-MM-DDTHH:MM:SSZ>" -EmployeeLeaveDateTime "<YYYY-MM-DDTHH:MM:SSZ>"

Before executing the cmdlet, make sure to replace <User’sUPN> with the user principal name and <YYYY-MM-DD> with the employee hire date & leave date.
If you want to bulk update employee hire dates and employee leave date and time, create a CSV file with three columns: UserPrincipalName, HireDateTime, and LeaveDateTime.

After creating the CSV file, run the following cmdlet with the appropriate file path to bulk update user employee hire and leave date time values.
```
Import-Csv "" | ForEach-Object {Update-MgUser -UserId $_.UserPrincipalName -EmployeeHireDate $_.HireDate -EmployeeLeaveDateTime $_.LeaveDate[}
```

Orchestrate employee hire and leave dates seamlessly in Microsoft 365 with AdminDroid!

With AdminDroid’s Microsoft 365 management actions, you can configure employee hire and leave dates for single or bulk users.
Here, you can also bulk update user identity attributes such as department, job title, office location, sign-in status, city and more.

2. How to automate employee onboarding & offboarding using Microsoft Entra ID lifecycle workflows?

Manual lifecycle management adds unnecessary workload, increases delays, and creates potential security gaps. Automating employee onboarding and offboarding with Microsoft Entra lifecycle workflows ensures timely access provisioning and secure access removal.

Configure employee onboarding & offboarding using lifecycle workflows

Before proceeding, please ensure that you have both the Entra ID Governance license and the Lifecycle Workflow Administrator role assigned. Also, ensure that the respective users to be onboarded or offboarded have already been created.

Navigate to ID Governance»Lifecycle workflows»Create workflow from Entra admin center.
Select the scenario available templates based on the lifecycle event to initiate the required actions.
In the basics tab, provide the workflow details and choose the trigger type as Time based attributes. Define the trigger by setting Days from event to determine when the flow should run.
Ensure employee hire date for onboarding and employee leave date time for offboarding is chosen in the Event user attribute field.
In the configure scope section, define the target users by applying Scope conditions such as department, country, company, etc., to ensure relevant employees are included.
In the Review tasks page, add the required tasks such as enabling accounts, assigning licenses, adding users to groups, sending notifications, disabling accounts, removing licenses, or deleting accounts after retention.
Finally, review the details and click Create in the Review + Create page to enable the workflow so it automatically processes eligible users based on the defined conditions.

microsoft-entra-id-lifecycle-workflow-template

Automate employee lifecycle management using AdminDroid to skip costly licenses for a quick, hassle-free setup.

Use AdminDroid's Microsoft 365 pre-built flow agents to quickly onboard or offboard users for one or many users at once.
Automate critical lifecycle actions including account provisioning, license assignment, secure access revocation and more with minimal effort.
Eliminate manual processes and scripts while ensuring secure and efficient Microsoft 365 user lifecycle management.

3. How to define custom security attributes in Microsoft Entra ID to enhance employee information?

Custom security attributes in Microsoft Entra ID allow organizations to extend user objects with business-specific metadata for governance, authorization, and classification. Here is the three-stage process to define and assign custom security attributes.

1. Create custom attribute set in Microsoft Entra ID

An attribute set is used to group related custom security attributes under a single category, making them easier to organize and manage. To create a custom attribute set, you need the Attribute Definition Administrator role.

In Entra portal, navigate to Entra ID»Custom security attributes»Add attributes set.
Now provide unique name and description to define the attribute set.
Configure the Maximum number of attributes limit and click Add to save the configuration.

2. Configure custom security attribute in Microsoft Entra ID

Custom security attributes are created within the attribute set to store structured employee-specific information. These attributes can later be used in Entra ID dynamic groups and access control scenarios.

Open the newly created attribute set and click Add attribute.
Provide a valid attribute name, enter an optional description, and choose the desired Data type (Boolean, Integer, or String) for the attribute.
Use the radio button to Allow multiple values to be assigned or Only allow predefined values to be assigned fields based on your specific use case.
Then, click Save to apply the changes.

entra-custom-security-attributes-new-attribute

3. Assign custom security attributes in Microsoft Entra ID

After creating custom security attributes in Microsoft Entra ID, values can be assigned to users for classification and identity governance. This requires the Attribute Assignment Administrator role.

Navigate to Entra ID»All Users and select the employee who you wish to assign the attribute.
Then click on Custom security attributes in the user profile and click Add assignment.
Select the attribute set, attribute name, and value, then click Save to complete the assignment.

4. What are the benefits of integrating employee details into Microsoft 365?

Integrating employee details into Microsoft 365 helps to automate user provisioning, improve access management and simplify identity governance. Here are the key benefits of incorporating employee details in Microsoft 365.

Microsoft Entra ID lifecycle workflow automation

Employee information powers lifecycle workflows by automating Microsoft 365 onboarding tasks such as license assignment, group membership updates, account enablement, and notifications. It also supports offboarding processes, including account deactivation, license removal, and removal of users from all groups based on their lifecycle events such as hire or termination date.

Automation with M365 dynamic membership groups

By using employee organizational data, IT admins can leverage dynamic membership groups in Microsoft 365 to automatically assign users to various groups based on attributes like department or job title. This reduces manual effort and ensures memberships stay up to date, as shown below.

Enforce Attribute-Based Conditional Access (ABAC) Employee attributes can drive dynamic group membership, which can then be used by Conditional Access policies. For example, you can enforce MFA and device compliance for new hires while allowing standard users seamless access from trusted corporate devices.
Secure admin roles with Just-In-Time access Employee attributes can be used to build dynamic groups that help determine eligibility for Just-In-Time access through Entra Privileged Identity Management (PIM). This ensures privileged roles are granted only to eligible users when needed, effectively reducing standing admin rights and improving overall security.
Targeted Entra ID access reviews Employee attributes help organizations perform targeted Entra access reviews in M365 groups to ensure only the right employees retain access to sensitive resources, significantly improving security and compliance.