Guest Domains & Pending Invitations
The question it answers: Which external organisations do our guests come from, and how many of their guests are still active?
Which organisations you actually collaborate with, how many of their guests are still active, and which invitations were never accepted. A pending invitation is a live, redeemable link into the tenant for whoever holds the invite mail.
At a glance
Section titled “At a glance”| Where in the app | Entra ID › Users › Guest Domains & Invitations |
| Workload | Entra ID |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | Microsoft Entra ID P1 for the activity columns. The domains work without it. |
| Report id (API and MCP) | entra.users.guest-domains |
| Tabs on its page | Pending Guest Invitations |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Domain | Domain | Text |
| Consumer mail domain | IsConsumerDomain | Status |
| Guests | GuestCount | Text |
| Pending | PendingCount | Text |
| Never signed in | NeverSignedInCount | Text |
| Inactive 90+ days | InactiveOver90Count | Text |
| Disabled | DisabledCount | Text |
| Last activity | LastActivity | Date |
| Newest guest | NewestInvite | Date |
What it needs
Section titled “What it needs”Licence: Microsoft Entra ID P1 for the activity columns. The domains work without it.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
User.Read.All | Microsoft Graph | Read all users’ full profiles | |
User-LifeCycleInfo.Read.All | Microsoft Graph | Read all users’ lifecycle information | |
AuditLog.Read.All | Microsoft Graph | Read all audit log data |
Data sources it reads
GET /v1.0/usersGET /v1.0/users?$select=signInActivity
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/entra.users.guest-domains?size=100An AI assistant reads it with the MCP tool get_report and the id entra.users.guest-domains. The client needs the Read grant for Entra ID. See Using the API.