Skip to content

Data Subject Requests Due (Priva)

The question it answers: Which data subject requests are open, how many days are left until they are due, and which are stuck?

Under GDPR and similar laws a data subject request must be answered within a fixed period - one month under GDPR. This report lists open requests, the days left until their internal due date, and requests stuck in a stage.

Where in the appEntra ID › Identity Governance & Lifecycle › Data Subject Requests Due
WorkloadCompliance
KindFindings list · dashboard tile
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed).
LicenceMicrosoft Priva Subject Rights Requests.
Report id (API and MCP)entra.governance.subject-rights-requests
ColumnKeyType
SeveritySeverityStatus
TypeCategoryText
RequestSubjectLink
CheckSettingText
Status / stageValueText
FindingFindingText
Data subject / datesDetailText
DueWhenDate
Days leftNumberNumber

A findings list hides columns that no row fills. Severity is Critical, Serious, Warning, OK or Info; rows rated Critical, Serious or Warning need attention (Working with findings).

Licence: Microsoft Priva Subject Rights Requests.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
SubjectRightsRequest.Read.AllMicrosoft GraphRead all subject rights requests
Data sources it reads
  • GET /v1.0/security/subjectRightsRequests
GET /ir-api/v1/reports/entra.governance.subject-rights-requests?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.governance.subject-rights-requests. The client needs the Read grant for Compliance. See Using the API.