User Risk from AAD Identity Protection

We have AAD Identity Protection logs connected to Azure Sentinel and I can see sign in risk events.  I'm having trouble finding users who are flagged for risk.  I've created some queries and dashboar...