Skip to content

Entra ID Groups with Licensing Issues

The question it answers: Which licensing groups have members whose licence from the group failed to apply?

Where in the appLicensing › Groups › Groups With Licences Processing Issues
WorkloadEntra ID
KindTable
DataRead from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). It reads through PowerShell (Exchange Online or SharePoint Online), so the first load takes longer than a Graph report.
LicenceMicrosoft Entra ID P1 (group-based licensing).
Report id (API and MCP)entra.groups.licensing-issues
ColumnKeyType
Display NameDisplayNameText
MembersTotalMemberCountText
With Licence ErrorsLicenseErrorCountText

Licence: Microsoft Entra ID P1 (group-based licensing).

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
Group.Read.AllMicrosoft GraphRead all groups
Data sources it reads
  • PowerShell: Get-MgGroup -All -Property DisplayName, Id, AssignedLicenses
  • PowerShell: Get-MgGroupMemberWithLicenseError -GroupId -All (per licensed group)
  • PowerShell: Get-MgGroupMemberCount -GroupId (GET /groups/{id}/members/$count, per group with errors)
GET /ir-api/v1/reports/entra.groups.licensing-issues?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.licensing-issues. The client needs the Read grant for Entra ID. See Using the API.