Azure Applications & Access Reports

6 Reports
About Applications & Access Reports

These reports provide visibility into your Microsoft Entra ID application landscape, including app registrations, service principals, directory role assignments, and license utilization. All six reports use free-tier Microsoft Graph API endpoints — no Entra ID P1 or P2 license is required.

Free Tier: These reports require Application.Read.All and Directory.Read.All Graph API permissions only. No premium licensing is needed.

Example: Azure Applications & Access Reports in AD Reports

AD Reports Azure Applications and Access Reports

Available Reports

All App Registrations

Lists all application registrations in your Entra ID tenant with display name, application ID, creation date, and sign-in audience.

Apps with Expiring Secrets (30 days)

App registrations with client secrets expiring within the next 30 days. Includes a computed Days Until Expiry column for proactive credential rotation.

Apps with Expiring Certificates (30 days)

App registrations with certificates expiring within the next 30 days. Includes a computed Days Until Expiry column to prevent certificate-related service outages.

All Service Principals

Lists all enterprise applications (service principals) in your tenant with type, enabled status, and associated application ID.

All Role Assignments

Lists all Entra ID directory role assignments showing which users and service principals hold admin roles such as Global Administrator, User Administrator, and other directory roles.

License Utilization

Shows assigned vs. consumed license counts per subscription SKU with utilization percentage. Helps identify unused or over-provisioned licenses for cost optimization.