Skip to content

Commit 1cca8a0

Browse files
Merge pull request #233435 from besiler/patch-5
Update on 120 user limit, removed GCC
2 parents d1022ee + 028eb0e commit 1cca8a0

File tree

1 file changed

+3
-6
lines changed

1 file changed

+3
-6
lines changed

articles/active-directory/reports-monitoring/howto-manage-inactive-user-accounts.md

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,6 @@ In large environments, user accounts are not always deleted when employees leave
2020

2121
This article explains a method to handle obsolete user accounts in Azure AD.
2222

23-
> [!IMPORTANT]
24-
> APIs under the `/beta` version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the **Version** selector.
25-
2623
## What are inactive user accounts?
2724

2825
Inactive accounts are user accounts that are not required anymore by members of your organization to gain access to your resources. One key identifier for inactive accounts is that they haven't been used *for a while* to sign-in to your environment. Because inactive accounts are tied to the sign-in activity, you can use the timestamp of the last sign-in that was successful to detect them.
@@ -40,6 +37,9 @@ You detect inactive accounts by evaluating the **lastSignInDateTime** property e
4037

4138
- **Users by date**: In this scenario, you request a list of users with a lastSignInDateTime before a specified date: `https://graph.microsoft.com/v1.0/users?$filter=signInActivity/lastSignInDateTime le 2019-06-01T00:00:00Z`
4239

40+
> [!NOTE]
41+
> When you request the signInActivity property while listing users, the maximum page size is 120 users. Requests with $top set higher than 120 will fail. SignInActivity supports `$filter` (`eq`, `ne`, `not`, `ge`, `le`) *but* not with any other filterable properties.
42+
4343
> [!NOTE]
4444
> There may be the need to generate a report of the last sign in date of all users, if so you can use the following scenario.
4545
> **Last Sign In Date and Time for All Users**: In this scenario, you request a list of all users, and the last lastSignInDateTime for each respective user: `https://graph.microsoft.com/v1.0/users?$select=displayName,signInActivity`
@@ -52,9 +52,6 @@ This section lists what you need to know about the lastSignInDateTime property.
5252

5353
The **lastSignInDateTime** property is exposed by the [signInActivity resource type](/graph/api/resources/signinactivity) of the [Microsoft Graph API](/graph/overview#whats-in-microsoft-graph).
5454

55-
> [!NOTE]
56-
> The signInActivity resource type isn't yet supported in US Government GCC High environments.
57-
5855
### Is the lastSignInDateTime property available through the Get-AzureAdUser cmdlet?
5956

6057
No.

0 commit comments

Comments
 (0)