Skip to content

Unlicensed Users

The question it answers: Which member accounts hold no licence?

Where in the appEntra ID › Users › Unlicensed Users
WorkloadEntra ID
KindTable
DataBuilt from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
LicenceNo extra licence needed.
Report id (API and MCP)entra.users.unlicensed
ColumnKeyType
Display NameDisplayNameText
User Principal NameUserPrincipalNameText
Account EnabledAccountEnabledYesNo
Usage LocationUsageLocationText

Licence: No extra licence needed.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
User.Read.AllMicrosoft GraphRead all users’ full profiles
User-LifeCycleInfo.Read.AllMicrosoft GraphRead all users’ lifecycle information
Data sources it reads
  • GET /v1.0/users ($select=assignedLicenses,...)
GET /ir-api/v1/reports/entra.users.unlicensed?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.users.unlicensed. The client needs the Read grant for Entra ID. See Using the API.