Merge pull request #26030 from microsoftgraph/IDNA-reports-overview-updates

Danielabom · web-flow · commit 0ba5ef058790 · 2025-01-07T16:45:39.000-06:00
IDNA reports overview updates
diff --git a/api-reference/beta/resources/appcredentialsigninactivity.md b/api-reference/beta/resources/appcredentialsigninactivity.md
@@ -5,7 +5,7 @@ ms.localizationpriority: medium
 author: "madansr7"
 ms.subservice: "reports"
 doc_type: "resourcePageType"
-toc.title: App credential sign-in activity
+toc.title: Application credential sign-in activity (preview)
 ms.date: 07/30/2024
 ---
 
diff --git a/api-reference/beta/resources/applicationsignindetailedsummary.md b/api-reference/beta/resources/applicationsignindetailedsummary.md
@@ -6,6 +6,7 @@ author: "sureshja"
 ms.subservice: "entra-monitoring-health"
 doc_type: resourcePageType
 ms.date: 07/22/2024
+toc.title: Application sign-in detailed summary (preview)
 ---
 
 # applicationSignInDetailedSummary resource type
diff --git a/api-reference/beta/resources/applicationsigninsummary.md b/api-reference/beta/resources/applicationsigninsummary.md
@@ -6,6 +6,7 @@ author: "egreenberg14"
 ms.subservice: "entra-monitoring-health"
 doc_type: "resourcePageType"
 ms.date: 07/22/2024
+toc.title: Application sign-in summary (preview)
 ---
 
 # applicationSignInSummary resource type
diff --git a/api-reference/beta/resources/customsecurityattributeaudit.md b/api-reference/beta/resources/customsecurityattributeaudit.md
@@ -6,6 +6,7 @@ ms.localizationpriority: medium
 ms.subservice: "entra-monitoring-health"
 doc_type: resourcePageType
 ms.date: 07/22/2024
+toc.title: Custom security attribute audit (preview)
 ---
 
 # customSecurityAttributeAudit resource type
diff --git a/api-reference/beta/resources/report-identity-access.md b/api-reference/beta/resources/report-identity-access.md
@@ -7,17 +7,19 @@ author: faithombongi
 ms.author: ombongifaith
 ms.reviewer: egreenberg
 doc_type: conceptualPageType
-ms.date: 12/30/2024
+ms.date: 01/07/2025
 ---
 
 # Identity and access reports API overview
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-With Microsoft Graph, you can programmatically accesss identity and access reports to monitor and troubleshoot all activities in your tenant. In addition, you can analyze these logs with Azure Monitor logs and Log Analytics, or stream to third-party SIEM tools for further investigations.
+With Microsoft Graph, you can programmatically access identity and access reports to monitor and troubleshoot all activities in your tenant. In addition, you can analyze these logs with Azure Monitor logs and Log Analytics, or stream to third-party SIEM tools for further investigations.
 
 The availability of all Microsoft Entra identity and access reports is governed by the [Microsoft Entra data retention policies](/entra/identity/monitoring-health/reference-reports-data-retention#how-long-does-azure-ad-store-the-data).
 
+Fore more information about identity and access reports, see [Microsoft Entra monitoring and health](/entra/identity/monitoring-health).
+
 ## Available reports
 
 ### Application activity reports
@@ -26,15 +28,15 @@ The availability of all Microsoft Entra identity and access reports is governed
 
 The AD FS application activity report provides information about how a relying party is configured with Active Directory Federation Services (AD FS), its aggregated usage, and whether the relying party configuration can be migrated to Microsoft Entra ID. For more information, see the [relyingPartyDetailedSummary](/graph/api/resources/applicationsigninsummary) resource.
 
-#### Application credential activity (preview)
+#### Application credential sign-in activity (preview)
 
 This report is available through the [appCredentialSignInActivity resource type](/graph/api/resources/appcredentialsigninactivity) and details the usage of an app credential (secret, certificate, or federated identity credential) in your tenant.
 
-#### Service principal sign in activity (preview)
+#### Service principal sign-in activity (preview)
 
-This report is available through the [servicePrincipalSignInActivity resource type](/graph/api/resources/serviceprincipalsigninactivity) and details the sign-in activity for a service principal in your tenant. The sign-in activity can be delegated or application-only scenarios. For application-only scenarios, the [application credential activity](#application-credential-activity-preview) provides additional information on the credential usage.
+This report is available through the [servicePrincipalSignInActivity resource type](/graph/api/resources/serviceprincipalsigninactivity) and details the sign-in activity for a service principal in your tenant. The sign-in activity can be delegated or application-only scenarios. For application-only scenarios, the [application credential activity](#application-credential-sign-in-activity-preview) provides additional information on the credential usage.
 
-#### Application sign-in
+#### Application sign-in (preview)
 
 Evaluate the usage of application sign-ins in your tenant using either [a summary report](../resources/applicationsigninsummary.md) or [a report that provides details of sign-ins](../resources/applicationsignindetailedsummary.md), such as the number of sign-ins and whether any errors occurred during sign-in.
 
@@ -44,21 +46,25 @@ In Microsoft Entra External ID for external tenants where you have registered ap
 
 ### Health reports (preview)
 
-- Monitor [Microsoft Entra availability and SLA compliance](../api/azureadauthentication-get.md). This report is available on the Microsoft Entra portal through **Monitoring and health** tab group > **Health** > **SLA attainment**
+- Monitor [Microsoft Entra availability and SLA compliance](../api/azureadauthentication-get.md). This report is available on the Microsoft Entra admin center through **Monitoring and health** tab group > **Health** > **SLA attainment**
 - Monitor the health of various Microsoft Entra and Microsoft 365 services through the [serviceActivity resource type](../resources/serviceactivity.md) and its associated API operations. For example:
-  - Success and failure metrics for important events within your tenant such as MFA sign-in success and failure metrics, and Conditional Access sign-in metrics for managed and compliant devices. These reports are available on the Microsoft Entra portal through **Monitoring and health** tab group > **Health** > **Scenario Monitoring**
+  - Success and failure metrics for important events within your tenant such as MFA sign-in success and failure metrics, and Conditional Access sign-in metrics for managed and compliant devices. These reports are available on the Microsoft Entra admin center through **Monitoring and health** tab group > **Health** > **Scenario Monitoring**
   - Health status for Microsoft 365 services including Exchange Online, Teams, and different Microsoft 365 apps like Word, PowerPoint, Visio, and Excel
 -  Retrieve signals for different alerts relating to Microsoft Entra services with [Microsoft Entra Health monitoring APIs](../resources/healthmonitoring-overview.md)
 
-### Registration and usage
+### Authentication methods registration and usage
 
-Authentication methods activity reports provides information on the registration and usage of [authentication methods](../resources/authenticationmethods-overview.md) in your tenant. For example, how many users are registered for an authentication method, how any are capable for MFA or SSPR, and so on. You can determine which authentication methods are more successful for your organization, what types of errors end users are running into, and what campaign you need to run to help your end users adopt the use of SSPR and MFA.
+Authentication methods activity reports provide information on the registration and usage of [authentication methods](../resources/authenticationmethods-overview.md) in your tenant. For example, how many users are registered for an authentication method, how any are capable for MFA or SSPR, and so on. You can determine which authentication methods are more successful for your organization, what types of errors end users are running into, and what campaign you need to run to help your end users adopt the use of SSPR and MFA.
 
 For more information, see [authentication method usage APIs](../resources/authenticationmethods-usage-insights-overview.md).
 
 ### Microsoft Entra audit logs
 
-Audit logs are available for sign-ins, activities in the directory, and provisioning. For more information, see [Microsoft Entra audit logs](../resources/azure-ad-auditlog-overview.md).
+Audit logs are available for sign-ins, activities in the directory including those relating to custom security attributes, and provisioning. For more information, see [Microsoft Entra audit logs](../resources/azure-ad-auditlog-overview.md).
+
+### Microsoft Entra recommendations (preview)
+
+Microsoft Entra recommendations are insights into your tenant state that fall into two categories: best practice recommendations or the Identity Secure Score. Best practice recommendations include detected usage of deprecated or retired features, MFA recommendations, and inactive guests. For more information, see [Microsoft Entra recommendations APIs](../resources/recommendations-api-overview.md)
 
 ## Related content
 
diff --git a/api-reference/beta/resources/serviceprincipalsigninactivity.md b/api-reference/beta/resources/serviceprincipalsigninactivity.md
@@ -6,6 +6,7 @@ author: "madansr7"
 ms.subservice: "reports"
 doc_type: "resourcePageType"
 ms.date: 07/30/2024
+toc.title: Service principal sign-in activity (preview)
 ---
 
 # servicePrincipalSignInActivity resource type
diff --git a/api-reference/beta/toc/reports/toc.yml b/api-reference/beta/toc/reports/toc.yml
@@ -54,25 +54,25 @@ items:
           href: ../../resources/relyingpartydetailedsummary.md
         - name: Get relying party detailed dummary
           href: ../../api/reportroot-getrelyingpartydetailedsummary.md
-    - name: App credential sign-in activity
+    - name: Application credential sign-in activity (preview)
       items:
-      - name: App credential sign-in activity
+      - name: Application credential sign-in activity (preview)
         href: ../../resources/appcredentialsigninactivity.md
       - name: List
         href: ../../api/reportroot-list-appcredentialsigninactivities.md
       - name: Get
         href: ../../api/appcredentialsigninactivity-get.md
     - name: Application sign-in
       items:
-      - name: Application sign in summary
+      - name: Application sign-in summary (preview)
         items:
-        - name: Application sign in summary
+        - name: Application sign-in summary (preview)
           href: ../../resources/applicationsigninsummary.md
         - name: Get
           href: ../../api/reportroot-getazureadapplicationsigninsummary.md
-      - name: Application sign in detailed summary
+      - name: Application sign-in detailed summary (preview)
         items:
-        - name: Application sign in detailed summary
+        - name: Application sign-in detailed summary (preview)
           href: ../../resources/applicationsignindetailedsummary.md
         - name: List
           href: ../../api/reportroot-list-applicationsignindetailedsummary.md
@@ -282,9 +282,9 @@ items:
             href: ../../api/healthmonitoring-alertconfiguration-get.md
           - name: Update
             href: ../../api/healthmonitoring-alertconfiguration-update.md
-    - name: Service principal sign in activity
+    - name: Service principal sign-in activity (preview)
       items:
-      - name: Service principal sign in activity
+      - name: Service principal sign-in activity (preview)
         href: ../../resources/serviceprincipalsigninactivity.md
       - name: List
         href: ../../api/reportroot-list-serviceprincipalsigninactivities.md
@@ -294,9 +294,9 @@ items:
     items:
     - name: Overview
       href: ../../resources/azure-ad-auditlog-overview.md
-    - name: Custom security attribute audit
+    - name: Custom security attribute audit (preview)
       items:
-      - name: Custom security attribute audit
+      - name: Custom security attribute audit (preview)
         href: ../../resources/customsecurityattributeaudit.md
       - name: List
         href: ../../api/auditlogroot-list-customsecurityattributeaudits.md
diff --git a/api-reference/v1.0/resources/report-identity-access.md b/api-reference/v1.0/resources/report-identity-access.md
@@ -14,10 +14,12 @@ ms.date: 12/30/2024
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-With Microsoft Graph, you can programmatically accesss identity and access reports to monitor and troubleshoot all activities in your tenant. In addition, you can analyze these logs with Azure Monitor logs and Log Analytics, or stream to third-party SIEM tools for further investigations.
+With Microsoft Graph, you can programmatically access identity and access reports to monitor and troubleshoot all activities in your tenant. In addition, you can analyze these logs with Azure Monitor logs and Log Analytics, or stream to third-party SIEM tools for further investigations.
 
 The availability of all Microsoft Entra identity and access reports is governed by the [Microsoft Entra data retention policies](/entra/identity/monitoring-health/reference-reports-data-retention#how-long-does-azure-ad-store-the-data).
 
+Fore more information about identity and access reports, see [Microsoft Entra monitoring and health](/entra/identity/monitoring-health).
+
 ## Available reports
 
 ### Application activity reports
@@ -28,14 +30,29 @@ The AD FS application activity report provides information about how a relying p
 
 #### Authentication methods registration and usage activity
 
-Authentication methods activity reports provides information on the registration and usage of [authentication methods](../resources/authenticationmethods-overview.md) in your tenant. For example, how many users are registered for an authentication method, how any are capable for MFA or SSPR, and so on. You can determine which authentication methods are more successful for your organization, what types of errors end users are running into, and what campaign you need to run to help your end users adopt the use of SSPR and MFA.
+Authentication methods activity reports provide information on the registration and usage of [authentication methods](../resources/authenticationmethods-overview.md) in your tenant. For example, how many users are registered for an authentication method, how any are capable for MFA or SSPR, and so on. You can determine which authentication methods are more successful for your organization, what types of errors end users are running into, and what campaign you need to run to help your end users adopt the use of SSPR and MFA.
 
 For more information, see [authentication method usage APIs](../resources/authenticationmethods-usage-insights-overview.md).
 
 ### Microsoft Entra audit logs
 
 Audit logs are available for sign-ins, activities in the directory, and provisioning. For more information, see [Microsoft Entra audit logs](../resources/azure-ad-auditlog-overview.md).
 
+## Reports in preview only
+
+The following reports are available on the `beta` endpoint only:
+
+- [Application credential sign-in activity](/graph/api/resources/appcredentialsigninactivity?view=graph-rest-beta&preserve-view=true)
+- [Service principal sign-in activity](/graph/api/resources/serviceprincipalsigninactivity?view=graph-rest-beta&preserve-view=true)
+- Application sign-in reports: [summarized count](/graph/api/resources/applicationsigninsummary?view=graph-rest-beta&preserve-view=true) or [detailed report](/graph/api/resources/applicationsignindetailedsummary?view=graph-rest-beta&preserve-view=true)
+- Application user activity for Microsoft Entra External ID: [daily insights](/graph/api/resources/dailyuserinsightmetricsroot?view=graph-rest-beta&preserve-view=true) and [monthly insights](/graph/api/resources/monthlyuserinsightmetricsroot?view=graph-rest-beta&preserve-view=true)
+- Health reports: [SLA attainment](/graph/api/azureadauthentication-get?view=graph-rest-beta&preserve-view=true), [service activity](/graph/api/resources/serviceactivity?view=graph-rest-beta&preserve-view=true), and [health monitoring](/graph/api/resources/healthmonitoring-overview?view=graph-rest-beta&preserve-view=true)
+- The following authentication methods registration and usage reports
+  - [Credential usage summary](/graph/api/resources/credentialusagesummary?view=graph-rest-beta&preserve-view=true)
+  - [Credential user registration count](/graph/api/resources/credentialuserregistrationcount?view=graph-rest-beta&preserve-view=true)
+  - [User credential usage details](/graph/api/resources/usercredentialusagedetails?view=graph-rest-beta&preserve-view=true)
+- [Microsoft Entra recommendations](/graph/api/resources/recommendations-api-overview?view=graph-rest-beta&preserve-view=true)
+
 ## Related content
 
 - For more information about these reports, see [Microsoft Entra monitoring and health](/entra/identity/monitoring-health)
