Skip to content

Multi-geo Data Location

The question it answers: Where are users’ mailboxes, OneDrives and group sites stored in a Multi-Geo tenant, and which have no preferred data location?

In a Multi-Geo tenant, preferredDataLocation decides where a user’s mailbox and OneDrive, and a group’s site, are stored. Unset means the central geo. For data-residency obligations that is a compliance question, not a technical one - this report shows where the data is and where the user is.

Where in the appEntra ID › Identity Configuration › Multi-geo Data Location
WorkloadEntra ID
KindFindings list · dashboard tile
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed).
LicenceMicrosoft 365 Multi-Geo add-on (the report is empty otherwise).
Report id (API and MCP)entra.configuration.multi-geo
ColumnKeyType
SeveritySeverityStatus
FindingCategoryText
User / group / geoSubjectLink
CheckSettingText
ValueValueText
FindingFindingText
UPNDetailText
DateWhenDate
CountNumberNumber

A findings list hides columns that no row fills. Severity is Critical, Serious, Warning, OK or Info; rows rated Critical, Serious or Warning need attention (Working with findings).

Licence: Microsoft 365 Multi-Geo add-on (the report is empty otherwise).

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
User.Read.AllMicrosoft GraphRead all users’ full profiles
Group.Read.AllMicrosoft GraphRead all groups
Data sources it reads
  • GET /v1.0/users?$select=preferredDataLocation,usageLocation,country
  • GET /v1.0/groups?$select=preferredDataLocation
GET /ir-api/v1/reports/entra.configuration.multi-geo?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.configuration.multi-geo. The client needs the Read grant for Entra ID. See Using the API.