I have been receiving Admin alerts from Microsoft stating: "We've detected users in your tenant may have had email messages unexpectedly deleted by the Yahoo mail app". The recommended action is to identify users and work with them to help them retrieve the emails.
To identify the users, we are instructed to look up the app in the Entra portal by app ID, then identify the user. I did, I got a match to an Object ID, which I assume is the user ID. So I looked up the Object ID on the Entra Admin Center, in the search box at the top of Home, Users, All users, and I get no matches.
Am I not looking correctly, or the message saying that there are users in my org using that app is a generic message and doesn't really apply to us?
Thanks.
