Microsoft Graph Filter by specific Domain Name

[Larry Jones]

• I have over 20000 users and we have four sub-domain.
• I'm trying reduce the results when making a Graph call by only calling those users with a specific userPrincipalName sub-domain.

When I execute the query it's return all users that has the main domain and the users that has sub-domain. 

Question: How can I execute a graph call and return only users with specific sub-domain along with the other filters.

$uri = "https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=appDisplayName eq 'Windows Sign In' AND deviceDetail/operatingSystem eq 'Windows' AND createdDateTime ge $CurrentDate AND endwith(userPrincipalName,'@group.maindomain.net') &$Top=1000"

Thank You,

-Larry

[#2]

I just tested this query and this works:
https://graph.microsoft.com/v1.0/auditlogs/signins?filter=endswith(userPrincipalName,"domainxxx.onmi...")

I see you have 'endwith', without the s. That might be the problem?

[#3]

@Thijs Lecomte  Thank you for responding, I've added the "S" and still not working. Also, I moved the endswith at the beginning of the URL. Sorry to say I can't use the onmicrosoft.com address, it doesn't have the sub-domain attached to the onmicrosoft.com address 

All the other filters is working just that one filter I'm having the issue.

$uri = "https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=endswith(userPrincipalName,'southeast.xxx...') AND appDisplayName eq 'Windows Sign In' AND deviceDetail/operatingSystem eq 'Windows' AND createdDateTime ge $CurrentDate &$Top=1000"

Thank You,

-Larry

[#4]

Could you try it with just the filter on the UPN and check what that gives you?

[#5]

@Thijs Lecomte Thank you again....

still getting the same results

$uri = "https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=endswith(userPrincipalName,'southeast.xxx...')"

-Larry

[#6 · Accepted solution]

As noted in the documentation, only startswith and eq operators are supported for userPrincipalName. Welcome to the wonderful world of crappy oData filtering...