Expiring Entra ID Groups (90 Days)

The question it answers: Which Microsoft 365 groups expire within the next 90 days?

Note

Lists groups whose expiration date is within the next 90 days (fixed window), soonest first. Only Microsoft 365 groups under a group expiration policy have an expiration date.

At a glance

Where in the app	Entra ID › Groups › Groups Expiring Soon
Workload	Entra ID
Kind	Table
Data	Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report.
Licence	Microsoft Entra ID P1 (group expiration policy).
Report id (API and MCP)	entra.groups.expiring-groups

Columns

Column	Key	Type
Display Name	DisplayName	Text
Expiration Date Time	ExpirationDateTime	DateTime

What it needs

Licence: Microsoft Entra ID P1 (group expiration policy).

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
Group.Read.All	Microsoft Graph	Read all groups

Data sources it reads

• PowerShell: Get-MgGroup -Filter 'expirationDateTime le <now + 90 days>' -All -ConsistencyLevel Eventual (GET /v1.0/groups)

Through the API and MCP

GET /ir-api/v1/reports/entra.groups.expiring-groups?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.expiring-groups. The client needs the Read grant for Entra ID. See Using the API.