None of them load any data. Azure support told me that we needed an a/d premium license to view these reports.
None of the MS support articles mention that anywhere. The only data we do have access to is going to an invidividual user and looking at their sign-ins. However, even that doesn't seem reliable. No matter what dates we select, it only loads one or two days of activity.
I'm hoping someone on this forum can help me understand what we should have access to. I believe we should have access to these reports, azure support can't figure out why they aren't working, so they are telling us we need to upgrade our subscription.
I've already submitted two tickets with office 365 and azure support about this with no resolution. Any help would be appreciated.
Now, it's not unusual to have the data in these reports be delayed for hours at a time, so give it another try later on. You can also enable the event collection for the SCC Audit logs, though I dont think this is necessary in order to collect/process Azure AD events.
Thanks. This has been ongoing for a few months now, so I don't think it's a delay in report data. I understand that only those 3 reports are free, but they've literally never shown any events / data - even though we had an account that was having login events from all over the world which showed in their specific user sign in event log.
I've given those articles to azure support (and many more) but they just keep telling me we need to upgrade our subscription and that those reports wouldn't show any office 365 events and that they only record azure activity (pretty sure that's not true at all).
I will look into the SCC settings you mentioned. Thank you.