Microsoft Entra ID
FundamentalsUsage and insights report
In brief
The documentation now explains that reported last activity can include incomplete sign-ins absent from sign-in logs. A timestamp does not confirm successful authentication or token issuance, and some partial activity may be misclassified as app-only during preview.
What Entra admins need to know
Administrators should consider these limitations when interpreting report data and making access decisions.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Service principal sign-in activity (preview)
The Service principal sign-in activity (preview) report provides the last activity date for every service principal. The report provides you with information on the usage of the service principal - whether it was used as a client or resource app and whether it was used in an app-only or delegated context. The report shows the last time the service principal was used.
:::image type="content" source="media/concept-usage-insights-report/service-principal-sign-ins.png" alt-text="Screenshot of the service principal sign-in activity report." lightbox="media/concept-usage-insights-report/service-principal-sign-ins.png":::
:::image type="content" source="media/concept-usage-insights-report/service-principal-sign-ins.png" alt-text="Screenshot of the service principal sign-in activity report." lightbox="media/concept-usage-insights-report/service-principal-sign-ins.png":::
@@ -2,9 +2,10 @@ title: Usage and insights report description: Learn about the information you can explore using the Usage and insights report in Microsoft Entra ID. ms.topic: concept-article-ms.date: 05/27/2025+ms.date: 10/29/2026 ms.reviewer: madansr7 ms.custom: sfi-image-nochange+ai-usage: ai-assisted # Customer intent: As an IT admin, I want to understand how my users are using Microsoft Entra ID so that I can make informed decisions about my organization's security posture. --- @@ -112,7 +113,12 @@ Looking for the status of an authentication registration or reset event of a use ## Service principal sign-in activity (preview) -The Service principal sign-in activity (preview) report provides the last activity date for every service principal. The report provides you with information on the usage of the service principal - whether it was used as a client or resource app and whether it was used in an app-only or delegated context. The report shows the last time the service principal was used.+The Service principal sign-in activity (preview) report provides the last activity date for every service principal. The report provides you with information on the usage of the service principal - whether it was used as a client or resource app and whether it was used in an app-only or delegated context.++> [!IMPORTANT]+> Last activity can include partial sign-ins and other incomplete activity that doesn't appear in sign-in logs. A reported timestamp alone doesn't establish that authentication completed or succeeded, or that an access token was issued.+>+> During preview, some partial sign-in activity can be incorrectly classified as application-authentication (app-only) activity. This is a classification limitation in the current preview, which is intended to be resolved in the future. :::image type="content" source="media/concept-usage-insights-report/service-principal-sign-ins.png" alt-text="Screenshot of the service principal sign-in activity report." lightbox="media/concept-usage-insights-report/service-principal-sign-ins.png":::