I'm trying to set up an automation where I receive email summaries of sign-in logs from Entra ID. Specifically, I want to gather information like the number of failed sign-ins, the IP addresses for those failed attempts, and which applications are being accessed. Ideally, I'd like to get a summary for every 30-day period sent directly to certain admin email addresses. For instance, it would be great if I could log into Outlook and receive an email on the first of each month containing this summary of the previous month's sign-in logs. I've heard that Power BI and MS Graph could help with this, especially since I have an Office E5 license, but I'm not sure if I'm on the right track. I would appreciate any guidance!
1 Answer
There are several ways to automate sending emails with your sign-in log data. The real challenge lies in summarizing that raw data. You can use tools like Power BI, Python, or PowerShell for this—just focus on defining your summarization needs. Once you have that down, it'll be easier to choose the right tools for the job.
Are you saying that using app registration and the Graph API to connect with Power BI is the correct way to go? I assume I just need to nail down my criteria for summarization. Also, how should I approach the email setup?