Forum Discussion
How to check if a Microsoft Enterprise app is in use based on the last 90 days of usage data.
Hello Team, Our organization has deployed over 1,000 enterprise applications, but we are uncertain about how many are actively in use. We plan to disable and delete the applications that have not...
You can use the servicePrincipalSignInActivities report: https://learn.microsoft.com/en-us/graph/api/reportroot-list-serviceprincipalsigninactivities?view=graph-rest-beta&tabs=http
It gives you data on when the given SP was last used, which goes well beyond the 30 days you get from logs.
Hello VasilMichev
Thanks for your reply on the discussion.
I am running KQL queries to obtain usage details of enterprise applications for the last 90 days based on the mentioned sign-in activities. Besides sign-in activities, I would like to know if there are other mechanisms, such as API permissions, used by the service principal.