Insights-UserMetric.Read.All

Allows an app to read user metrics insights, such as daily and monthly active users, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the Insights-UserMetric.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	34cbd96c-d824-4755-90d3-1008ef47efc1	7d249730-51a3-4180-8ec1-214f144f1bff
DisplayText	Read all user metrics insights	Read user metrics insights
Description	Allows an app to read all user metrics insights, such as daily and monthly active users, without a signed-in user.	Allows an app to read user metrics insights, such as daily and monthly active users, on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	daily GET /userInsightsRoot/daily/summary
	GET /reports/userInsights/daily/activeUsers
	GET /reports/userInsights/daily/authentications
	GET /reports/userInsights/daily/mfaCompletions
	GET /reports/userInsights/daily/requests
	GET /reports/userInsights/daily/signUps
	GET /reports/userInsights/daily/userCount
	GET /reports/userInsights/monthly/activeUsers
	GET /reports/userInsights/monthly/authentications
	GET /reports/userInsights/monthly/mfaCompletions
	GET /reports/userInsights/monthly/requests
	GET /reports/userInsights/monthly/signUps
	GET /reports/userInsightsRoot/monthly/summary

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgBetaReportUserInsightDailyActiveUser
	Get-MgBetaReportUserInsightDailyAuthentication
	Get-MgBetaReportUserInsightDailyMfaCompletion
	Get-MgBetaReportUserInsightDailySignUp
	Get-MgBetaReportUserInsightDailyUserCount
	Get-MgBetaReportUserInsightMonthlyActiveUser
	Get-MgBetaReportUserInsightMonthlyAuthentication
	Get-MgBetaReportUserInsightMonthlyMfaCompletion
	Get-MgBetaReportUserInsightMonthlyRequest
	Get-MgBetaReportUserInsightMonthlySignUp

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: activeUsersMetric

Property	Type	Description
count	Int64	The total number of users who made at least one authentication request within the specified time period.
factDate	Date	Date of the insight.
id	String	Identifier for the user insight. Inherited from entity.

Graph reference: authenticationsMetric

Property	Type	Description
appid	String	The ID of the Microsoft Entra application. Supports `$filter` (`eq`).
attemptsCount	Int64	The number of authentication requests made in the specified period. Supports `$filter` (`eq`).
country	String	The location where the customers authenticated from. Supports `$filter` (`eq`).
factDate	Date	The date of the user insight.
id	String	Identifier for the user insight. Inherited from entity.
os	String	The platform for the device that the customers used. Supports `$filter` (`eq`).
successCount	Int64	Number of successful authentication requests. Supports `$filter` (`eq`).

Graph reference: insightSummary

Property	Type	Description
activeUsers	Int64	Daily active users.
appId	String	The ID of the Microsoft Entra application.
authenticationCompletions	Int64	Daily authentication completions.
authenticationRequests	Int64	Daily authentication requests.
factDate	Date	The date of the insight.
id	String	Identifier for the insight. Inherited from entity.
os	String	The platform for the device that the customers used. Supports `$filter` (`eq`).
securityTextCompletions	Int64	Daily MFA SMS completions.
securityTextRequests	Int64	Daily MFA SMS requests.
securityVoiceCompletions	Int64	Daily MFA Voice completions.
securityVoiceRequests	Int64	Daily MFA Voice requests.

Graph reference: mfaCompletionMetric

Property	Type	Description
appId	String	The ID of the Microsoft Entra application. Supports `$filter` (`eq`).
attemptsCount	Int64	Number of users who attempted to sign up. Supports `$filter` (`eq`).
factDate	Date	The date of the user insight.
id	String	Identifier for the user insight. Inherited from entity.
mfaMethod	String	The MFA authentication method used by the customers. Supports `$filter` (`eq`).
os	String	The platform of the device that the customers used. Supports `$filter` (`eq`).
successCount	Int64	Number of users who signed up successfully. Supports `$filter` (`eq`).

Graph reference: userCountMetric

Property	Type	Description
count	Int64	The total number of users in the tenant over time.
factDate	Date	The date of the insight.
id	String	Identifier for the insight. Inherited from entity.

Graph reference: userRequestsMetric

Property	Type	Description
factDate	Date	The date of the user insight.
id	String	Identifier for the user insight. Inherited from entity.
requestCount	Int64	Number of requests to the tenant. Supports `$filter` (`eq`).

Graph reference: userSignUpMetric

Property	Type	Description
count	Int64	The total number of users who signed up in the specified period. Supports `$filter` (`eq`).
factDate	Date	The date of the user insight.
id	String	Identifier for the user insight. Inherited from entity.
os	String	The device plaform that the customers used. Supports `$filter` (`eq`).

Table of Contents

Insights-UserMetric.Read.All

Graph Methods

Resources