Forum Discussion

Copper Contributor

May 01, 2025

How to check if a Microsoft Enterprise app is in use based on the last 90 days of usage data.

Hello Team, Our organization has deployed over 1,000 enterprise applications, but we are uncertain about how many are actively in use. We plan to disable and delete the applications that have not...

Azure AD

VasilMichev

MVP

May 01, 2025

You can use the servicePrincipalSignInActivities report: https://learn.microsoft.com/en-us/graph/api/reportroot-list-serviceprincipalsigninactivities?view=graph-rest-beta&tabs=http

It gives you data on when the given SP was last used, which goes well beyond the 30 days you get from logs.

sunilkumarcherukuri
Copper Contributor
May 02, 2025
Thanks for your reply VasilMichev
I am running KQL queries to obtain usage details of enterprise applications for the last 90 days based on the mentioned sign-in activities. Besides sign-in activities, I would like to know if there are other mechanisms, such as API permissions, used by the service principal.
sunilkumarcherukuri
Copper Contributor
May 02, 2025
Hello VasilMichev
Thanks for your reply on the discussion.
I am running KQL queries to obtain usage details of enterprise applications for the last 90 days based on the mentioned sign-in activities. Besides sign-in activities, I would like to know if there are other mechanisms, such as API permissions, used by the service principal.