Extract user access to Cloud Apps categories.

Take this:

1. Use Cloud Discovery Log Parsing

• Export the raw Cloud Discovery logs.
• Filter them externally (e.g., in Excel or Power BI) by:
• App category = “Generative AI”
• Extract user identifiers (IP, username, etc.)
• This gives you a consolidated view of users accessing apps in that category.

2. Use Microsoft Defender for Endpoint Integration

• You can create custom Advanced Hunting queries in Microsoft 365 Defender.
• These queries can target Generative AI app domains and extract user activity across endpoints.
• This method is more scalable and automatable for monthly reporting.

3. Tag and Govern Apps

• Use Activity policies to track access.
• Set alerts or automated exports based on user activity.