In addition, for the get-mguser command, I suggest you can use the Format-List command to get all the relevant parameters to see if there is an external email address. Similarly, Get-MgGroup and Get-MgGroupMember and other group-related cmdlets want-GroupId. AddYears(-1). All or CustomSecAttributeAssignment. 1 Answer. This naming mismatch (hopefully to be fixed soon) is. Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user. ” Get-MgUser; If you’d like to use the advanced query capabilities, you need to add the ConsistencyLevel eventual and count parameter to your queries: get-mguser -consistencyLevel eventual -count userCount -search '"displayName:room"' Note: if you need to use search, remember to escape it with the single quote character like in the example above. This operation returns by default only a subset of the more commonly used. But it is also possible to get Graph to only return user objects matching specific criteria for the above properties. INPUTOBJECT <IUsersIdentity>: Identity Parameter. We've traced the bug to a recursion depth issue in PS 5. This example. By default, Connect-MgGraph targets the global. The classic approach is to run a cmdlet like Get-ExoMailbox or Get-MgUser to find the desired objects. Run Install-Module with -AllowClobber and -Force parameters if you run into command name conflicts when upgrading to older versions of the module. Graph. Get-MgUserPhoto: Get the specified profilePhoto or its metadata (profilePhoto properties). Q&A for work. onmicrosoft. Groups module that offers different cmdlets admins need to create and manage Azure AD groups via PowerShell. Graph. This is true for a single user that has confirmed licenses assigned and when run against all users, all instances being null. All Update-MgUser -UserId edwardlt501edwar@<managed. User. In both cases, you can use -ExpandProperty instead of calling Get-MgUserManager and Get. Graph. com -Property Id, displayName, assignedLicenses | Select -ExpandProperty AssignedLicenses DisabledPlans SkuId ----- ----- {} 4016f256-b063-4864-816e-d818aad600c9 Assigning Compound Licenses I'd like to get a display Name for these objects; I can obviously do this by running the appropriate 'Get' cmdlet for the type of directory object (i. any help or suggestion would be really appreciated. The Get-MgUser cmdlet simply targets v1. The DirectoryObjectId can be an application, group or user resource. This example shows how to use the Get-MgUserDelta Cmdlet. Update-MgUser -UserId <UserID>-UsageLocation 'US'-CompanyName 'Contoso'-City 'Denmark'-Department 'Development' The above cmdlet only changes a few of the properties. Up until now, this is the only possible way to get the last sign-in date for users. But it is also possible to get Graph to only return user objects matching specific criteria for the above properties. Read. Mail # A UPN can also be. Problem. Export the Last Sign-in date and time of All Users into a CSV file using below Powershell script. PowerShell. Get-MsolUser returns all the user details, including the parameter StrongAuthenticationMethods. The v1. To learn about permissions for this resource, see the permissions reference. To learn about permissions for this resource, see the permissions reference. Type: SwitchParameter: Position: Named: Default value: None: Required: False: Accept pipeline input: False: Accept wildcard characters:これまでユーザー情報の取得にし使用していた Get-MsolUser や Get-AzureADUser コマンドは、 Get-MgUser コマンドに置き換えられます。ここでは様々なシナリオでユーザーを取得する方法についてご紹介します。 テナントの全ユーザーを取得し. Copy and Paste the following command to install this package using PowerShellGet More Info. You also get connected to the Microsoft Graph as I highlighted here, but specifically to the Intune portion of the Graph: Typically, this type of connection is also designed for device. [OAuth2PermissionGrantId <String>]: The unique identifier of oAuth2PermissionGrant. INPUTOBJECT <IUsersIdentity>: Identity Parameter. Replace “user@domain. Users # A UPN can also be. PowerShell. peters@activedirectorypro. # THE PYTHON SDK IS IN PREVIEW. Install PSResource. Enforcing 2FA with MS Graph module instead of Azure AD module. All permissions or another role with access to users to. Sorry! Any help or pointers would be beyond. Select a user from the list. ServicePlans This example shows the services that user BelindaN@litwareinc. Graph PowerShell module retrieves the Azure AD user account and optionally returns the SignInActivity property. Additionally, Microsoft has a section on how to handle escaping of quotes, for queries to the Graph API (the same solution also applies. The way to escape a single quote ' in an OData filter is by doubling down on it, an efficient way to handle this when the value being fed to the filter could have single quotes in it can be with the . Examples Example 1: Get your own presence information Import-Module Microsoft. 3. The SharePoint Developer support team recently posted an interesting article about how to create a new Microsoft 365 group using the SharePoint Online REST. com). Users CMDLET, I can get user info from our directory with Get-MgUser command, but cannot -Select more than one attribute. Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user. AdditionalProperties Returns As you can see, when querying using Get-MgUser it will not return AAD extension attributes unless you specifically query the EXACT property you want to include. Azure AD to Microsoft Graph PowerShell by category. Read. When I execute the query it's return all users that has the main domain and the users that has sub-domain. Beta. Instead, you should use the Microsoft Graph. peombwa added the Needs: Author Feedback label Oct 4, 2022. INPUTOBJECT <IUsersIdentity>: Identity Parameter [AttachmentBaseId <String>]. This example shows how to use the Get-MgUserDrive Cmdlet. Sometimes just knowing the naming conventions isn't enough to guess the right command. BrettMiller BrettMiller. Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. Examples Example 1: Code snippet Import-Module Microsoft. How can I improve the email content to include the company logo or picture? Reply. But the long-term benefits outweigh the effort to learn it. Example 2: Get enabled usersThese cmdlets include Get-MgUser, Get-MgGroup, and Get-MgTeam (beta only). Get-MgUser returns the Manager and Authentication properties. com" | fl Us and. PowerShell. Connect-MgGraph -Scopes "User. Download a complete script to export all your users to CSV. Install-Module Microsoft. > Get-MgUser -UserId "[email protected]. Deleting a set of Azure AD accounts is a matter of looping through the set and calling Remove-MgUser to remove each account. IPaths18H5WxmUsersUserIdMicrosoftGraphGetmembergroupsPostRequestbodyContentApplicationJsonSchema. Get-MgUser-UserId ThePoShWolf @domain. CloudCommunications # A UPN can also be. Get-MgBetaUserById. ReadWrite. A collection of this user's license details. List all pages. Today I was looking at the Microsoft Graph PowerShell module to find out if any users had incorrect licences applied. If you are updating photos for contacts or groups, check out that article to see the specific information. For information on hash tables, run Get-Help about_Hash_Tables. As you can see, in the above log, even we’ve connected to the Microsoft Graph PowerShell with. One common task is to retrieve the last sign-in date time for all users in Azure AD. Dillon Silzer 48,541. Manager. Automate and manage your Microsoft 365 tenant by using the Microsoft Graph PowerShell SDK that brings the Microsoft Graph API to PowerShell. This example retrieves all contact objects in the directory. Specifies a count of the total number of items in a collection. "get-mailboxstatistics | select LastLogonTime" is today, because "(Get-MgUser -UserId <guid> -Select SignInActivity). Get-Mg Group -InputObject <IGroupsIdentity> [-ExpandProperty <String[]>] [-Property <String[]>] [<CommonParameters>] Description. Beta. Get-MsolUser or Get-AzureADUser cmdlet is used to get the Office 365 user details using PowerShell. Usage location is a property in Entra ID that. Get-MgUser > This cmdlet will retrieve users in your tenant. I recently started a new job and I’m trying my darndest to be. Graph. Authentication version 1. All". First, disconnect the existing graph session by running the below command: # To disconnect Graph Session Disconnect - MgGraph. For anything else, try Get-MgUser or ask a new question – Cpt. I have over 20000 users and we have four sub-domain. The first task is to connect using the Microsoft Graph PowerShell SDK, which requires you to set the scopes (permissions) required to manage any specific. SignInActivity. 10. Stack Overflow Public questions & answers; Stack Overflow for Teams Where developers & technologists share private knowledge with coworkers; Talent Build your employer brand ; Advertising Reach developers & technologists worldwide; Labs The future of collective knowledge sharing; About the company"get-mailboxstatistics | select LastLogonTime" is today, because "(Get-MgUser -UserId <guid> -Select SignInActivity). All True Access the directory as you Allows the app to have the same access to information in your work or school directory as you do. AggregateException,Microsoft. Open the toolkit, Click on Export Users and click Run. Basically, on the left-hand side of the Operator. ReadWrite. : (get-mgcontext). Pass a command and get the URL it calls. It is not too flexible (which is where I got stuck at today morning) but it is a good start to return a filtered list. Read. When trying to filter "isInteractive" as false I get a empty report. To get list of all users and their current password expiration policy activation status, run the below command: PowerShell. PowerShell. JSON, CSV, XML, etc. Connect-MgGraph -Scopes 'User. Graph. [AttachmentBaseId <String>]: The unique identifier of attachmentBase. Retrieve the properties and relationships of user object. This command allows you to get and extract information about users, or specific users based on criteria such as user name, email address, and manager from Azure Active Directory. company . PowerShell. Users Get-MgUser -Filter "startswith(givenName, 'J')" Read the SDK documentation for details on how to add the SDK to your project and create an authProvider instance. com') AND jobtitle eq 'Director'" ` -CountVariable CountVar -ConsistencyLevel eventual. First, retrieve the user Id of the desired guest using the ‘Get-MgUser’ cmdlet, and the group ID using the ‘Get-MgGroup’ cmdlet. com" -UsageLocation US If you use the Get-MgUser cmdlet without using the -All parameter, only the first 100 accounts are returned. Get-MgUser -OrderBy DisplayName-Search: Returns results based on search criteria: Get-MgUser -ConsistencyLevel eventual -Search '"DisplayName:Conf"'-Property: Filters properties (columns) Get-MgUser -Property Id, DisplayName | Select Id, DisplayName-Top: Sets the page size of results. For instance, to find all the accounts assigned a specific SKU, you can use a command like: For instance, to find all the accounts assigned a. Read. g. Step 8. We have tens of thousands of. Models. The Microsoft Graph API now supports the resource property signInActivity in users end-point, this resource exposes the lastSignInDateTime property which shows the last time a user made a successful sign-in. Get the specified profilePhoto or its metadata (profilePhoto properties). It. By default, Connect-MgGraph targets the global public cloud. Get-MgUser -Filter "CreatedDateTime ge $((Get-Date). Connect-MgGraph -TenantId "828e1143-88e3-492b-bf82-24c4a47ada63". Retrieve. The Get-MgUser command comes with a filtering function just like, e. Graph. Get-MgUserMemberOf -UserId <String> [-ExpandProperty <String []>] [-Property <String []>] [-Filter <String>] [-Search <String>] [-Skip <Int32>] [-Sort <String. For that, I have an Azure AD App with User. All True Read directory data Allows the app to read data in your organization's director… You mean the Graph API query, or? For any of the SDK cmdlets, you can add the -Verbose/-Debug parameters to get the URL called on the backend. 今回はユーザー情報とメールを取得するので以下のような Scope を指定してコマンドを実行します。. To add a gust user to a Microsoft 365 group, you can use the Microsoft Graph PowerShell module. You can update the SDK and all of its dependencies using the following. I am attempting to write a script that will get all user MFA phone numbers using Graph modules. Additionally, when it comes to the Get-MgUser Graph PowerShell command, I didn't see the SignInActivity parameter as a supported parameter within the documentation. For example, if you're looking for commands related to Microsoft Teams, you can run the. Retrieve the properties and relationships of a contact object. Retrieve the properties and relationships of user object. All (Application) – Get user details. com | fl Department But this line returns the result Get-MgUser -UserId [email protected] permission scope. Get Microsoft 365 Users Report with Specific Parameters: Get-MgUser provides a list of parameters to search and filter the users based on our requirements. Additional Links: Microsoft. (Find-MgGraphCommand -Command get-mguser). Connect and share knowledge within a single location that is structured and easy to search. This example shows how to use the Get-MgGroupMemberByRef Cmdlet. Users Get-MgUser -Filter "NOT(imAddresses/any(i:i eq '[email protected]” with the user’s email address you want to check. Read. Graph. Import-Module Microsoft. I would like to grab the last sign in logs with the filter up to 30 days of last sign in of a user. In addition to Microsoft. I have a shell for the function built out, but I am having trouble expressing what I need in function. When you run Connect-MgGraph to connect to the Graph, it’s wise to specify the identifier of the tenant to which you want to connect. x:The Set-MgUserLicense cmdlet can be found in the Microsoft. Read. `PS C:UsersRicha> Find-MgGraphCommand -command Get-MgUser | Select -First 1 -ExpandProperty Permissions Name IsAdmin Description FullDescription Directory. Next, you need to connect to the Microsoft Graph with the specific scopes or permissions for managing Microsoft Teams. Get-MgUser -All -Filter 'accountEnabled eq true'. Connect-MgGraph -Scopes User. For more information about the new cmdlets, see Get started with the Microsoft Graph PowerShell SDK. Update-MgUser -UserId <UserID>-UsageLocation 'US'-CompanyName 'Contoso'-City 'Denmark'-Department 'Development' The above cmdlet only changes a few of the properties. All The Admin role I'm using also has the Attribute Assignment Administrator role. All permission to the app, imported Microsoft. Get. The ones I was specifically looking at to notice this issue are the onPremises fields: OnPremisesDistinguishedName : OnPremisesDom. com" This returns some basic data like a unique ObjectID, DisplayName, EmailId, etc. peombwa removed this from Issues to triage in Graph SDK - Triage Oct 4, 2022. Users. This way, you know which user has a certain license capability and from what bundle it originates. I've added Directory. Read. Connecting to the Graph SDK. When you run Connect-MgGraph to connect to the Graph, it’s wise to specify the identifier of the tenant to which you want to connect. For information on hash tables, run Get-Help about_Hash_Tables. Microsoft 365 admins can update the properties of a user using the ‘Update-MgUser’ cmdlet as demonstrated below. Once you are connected, you can use the Get-MgUserManager cmdlet to get the manager of the specified user. All True Read directory data. PowerShell. may need to close out of all windows . Get-MgUser -PageSize 300 # or [int32]::MaxValue Easier of course is to use the -All switch:Filter using lambda operators. Group-based licensing in Microsoft Entra ID, part of Microsoft Entra, is available through the Azure portal. As you can imagine, there are many different attributes you can set when creating a new user, all of which can be found in the Microsoft Graph PowerShell reference documentation. Get-InstalledModule Microsoft. For example ‘Get-ADUser mishka’ works as SamAccountName is the default. ACTIVITIES <IMicrosoftGraphUserActivity[]>: The user's activities. PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e. Fetching signInActivity property requires an Azure AD Premium P1/P2 license and the AuditLog. Get all the mailbox settings of the signed-in user's mailbox that include settings for automatic replies, date format, locale (language and country/region), time format, time zone, working hours, and user purpose. The second is the New-MgUser cmdlet from the Microsoft Graph PowerShell SDK. I am able to get the phone numbers to show but I'm curious as to how I can get the UPN from MGUser in. I have at my disposal a couple commands that I can leverage to assist but I think the one I want to mainly use is Get-MgUser. Focus on what really matters and build scripts to automate your work instead of worrying about throttling, retries, redirects, and authentication. The slowest part of you script would be the individual Get-MgUser for each user in the CSV that would create one request for every user which isn't need because you can get all the information you after from the first request. All” permission scope. Microsoft. Examples Example 1: Code snippet Import-Module Microsoft. After run: Select-MgProfile -Name "beta",. For example, john_contoso. To assist you better can you provide more details on what you are not sure regarding how to handle the reges part. The Get-MgUser command comes with a filtering function just like, e. Get-MgUser -Top 10For starters, you need to specifically request the properties, as by default Get-MgUser returns only a small subset. Accounts need an initial password, so let’s create one to use for our new account. Import-Module Microsoft. Then loop through the licenses to check the assigned date for a service plan that belongs to that license (that’s where the hash table comes in). com -Property department | select departmentAfter running the script, it will automatically open c: empuserslicenses. A collection of this user's license details. Creating, Updating, and Deleting Users - Basic User Management Commands: - Get-MgUser - Remove-MgUser - New-MgUser - Update-MgUser . (do note that if you want other properties in the output, you also have to specify them, i. ReadWrite. (Get-MgUserLicenseDetail -UserId belindan@litwareinc. Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user. Get-MgUser コマンドを使用してユーザーに割り当てられているライセンスを確認する. There are three ways to allow delegated access using Connect-MgGraph: Using interactive authentication, where you provide the scopes that you require during your session: PowerShell. The Microsoft Graph provides admins access to the data in Microsoft 365. Use Filters to Target Mailboxes and Azure AD Accounts. Feb 11 at 23:47 | Show 4 more comments. Description. PasswordPolicies -contains. Install-Module -Name Microsoft. GetMgUser_List. Get-Command -Module Microsoft. Instead of using AzureAD or AzureADMS in cmdlet names, use Mg. See moreLearn how to use the Get-MgUser cmdlet to find and extract user information from the Azure Active Directory. For instance, (get-azureaduser -SearchString "NAME"). Fetch users created within a specific time period. Microsoft Graph A Microsoft programmability model that exposes REST APIs and client libraries to access data on. The classic approach is to run a cmdlet like Get-ExoMailbox or Get-MgUser to find the desired objects. Conclusion. Hello @Shashi Shailaj , here an update and answer to my first question. LastSignInDateTime }} The thing is, still still works but it gives me the results of the tenant I logged in to. For information on hash tables, run Get-Help about_Hash_Tables. Graph. So, to get all Azure AD users using Microsoft Graph, use the parameter -All. There are many different parameters your can use with Get-MgUser, such as: Using Get-MgEnvironment. csv and will look like the screenshot below. So for the above (with some formatting issues fixed) we have: Get-MgUser -Filter "userType eq 'Guest' and externalUserState eq 'PendingAcceptance'" -All -Property CreatedDateTime. Read. Get-MgUser); From what I can tell the type of directory object can't be gleaned via PowerShell with out 'trial-and-error'. West@Office365itpros. By default, this variable will be set in the global scope. The Update-MgUser cmdlet belongs to the Microsoft. I don't know where I'm. For information on hash tables, run Get-Help about_Hash_Tables. Get-MgUser -Filter "startswith(userPrincipalName,'username')" -Property "id,displayname,mail,officeLocation,onPremisesExtensionAttributes" | select id,displayname,mail,officeLocation,onPremisesExtensionAttributes In addition, since onPremisesExtensionAttributes is a collection, you can expand the output. 1. Graph. To get a list of all clouds that you can choose from, run: Get-MgEnvironment Import-Module Microsoft. Users) | Microsoft Learn Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. 2. Read-only. You signed in with another tab or window. This line return nothing Get-MgUser -UserId UserName@Domain. All", "Group. Here is a version I finally got working, pieces borrowed from various other posts/sources, mostly Andrew Water's other post here: Azure AD - Delete Users after XYZ since last sign in date This one will kick out the display name and creation date in addition since guest accounts UPNs aren't always the most readable. Connect-MgGraph -Scopes "User. Get-MgUser -All |Select-Object PasswordPolicies. All. Closed. Beta. If you have any other questions, please let me know. To Set Password Never Expire for All. Microsoft. Microsoft Graph is a powerful tool that allows administrators to manage their Azure AD tenant and automate tasks. Microsoft Graph SDKs use the v1. Administrators can then limit third-party app access to only that set of mailboxes by creating an application access policy for access to that group. Return the directory objects specified in a list of IDs. All and User. The Get-MgBetaUser cmdlet targets the beta version of the Graph API. Expand related entities. This command works because you allowed the application to use the `User. Result: Get-MgUser : The term 'Get-MgUser' is not recognized as the name of a cmdlet, function, script file, or operable program. See examples of how to filter, search, and select. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. Development. You'll need the user Id as a parameter to the other commands you'll run later. get-mguser -Filter "userprincipalname eq 'MyUserPrincipalName'" -Property "Id", "extension_[YourGuid]_msDS_cloudExtensionAttribute1" Share. msftbot closed this as completed Oct 14, 2022. I can work around this by starting a new Get-MgUser -UserId request for each user, which then returns the needed extensionAttribute value, but increases the time the script takes massively (from under 10 minutes to multiple hours). I installed the Graph API module and connected agains my tenant. Finding Contact Data. [AttachmentBaseId <String>]: The unique identifier of attachmentBase. 0 version of the API by default, and do not support all the types, properties, and APIs available in the beta. ReadWrite. The sample use-case you learned in this tutorial only covered the basics. Either pull the memberOf attribute in the Get-MgUser call (my preference); or; Use Get-MgGroup and pull the expanded members. 0. Note: The beta version of the Graph API is unsupported. Users Get-MgUser -Filter "startswith(givenName, 'J')" Read the SDK documentation for details on how to add the SDK to your project and create an authProvider instance. Before Microsoft Graph supports this property, we need to either get the mailbox last logon time using the Get-MailboxStatistics cmdlet or we need to crawl the Azure AD sign-in logs or the Unified audit logs in the Security and Compliance Center. But if you’re expecting the power of the Get-ADUser LdapFilter switch or the PowerShell expression language Filter switch, then you’re in for a sad surprise… The Get-MgUser filter uses OData v3, which is overly complex and lacks lots of functionality. With these being retired as soon as March or June 30 depending on who you ask there is at present no way to achieve this in the mean time and is a significant impact on our capability to provision users. OnMicrosoft. Microsoft Graph in PowerShell, Get-MgUser -Select multiple user properties. Thanks, @mr-oliva, and the team, for the memory dumps. # THE PYTHON SDK IS IN PREVIEW. com . In this article. INPUTOBJECT <IDirectoryObjectsIdentity>: Identity Parameter. Import-Module Microsoft. com'" Check the output to make sure the user you invited is listed, with a user principal name (UPN) in the format emailaddress#EXT#@domain. Models. Get early access and see previews of new features. Graph -AllowClobber -Force. So quickly, I verified with MSOnline module: Get-MSOLUser -UserPrincipalName "[email protected] this article Syntax Get-Mg User Mail Folder -UserId <String> [-Filter <String>] [<CommonParameters>] Get-Mg User Mail Folder -InputObject <IMailIdentity> [-Filter <String>] [<CommonParameters>] Description. Get-MgUser); From what I can tell the type of directory object can't be gleaned via PowerShell with out 'trial-and-error'. We can create a new app using PowerShell or via the Entra ID admin center. The workaround is to increase the -PageSize to something like Get-MgUser -All -PageSize 400 to reduce the number of pages or upgrade to PowerShell 7. There is a good guide to using that here: Office 365 for IT Pros – 23 Mar 22 Delete and Recover Azure AD User Accounts with PowerShell. Remove-MgUser -UserId '3f80a75e-750b-49aa-a6b0-d9bf6df7b4c6' -Confirm. Get the signed-in user. Assigning licenses to user accounts. Reload to refresh your session. Read. g. SignIns # A UPN can also be used as -UserId. For information on hash tables, run Get-Help about_Hash_Tables. 1 answer. You can get the Azure AD user accounts that work at a specific department in your organization. Models. Get the specified profilePhoto or its metadata (profilePhoto properties). INPUTOBJECT <IIdentitySignInsIdentity>: Identity Parameter [ActivityBasedTimeoutPolicyId <String>]: The unique identifier of activityBasedTimeoutPolicy2 answers. To get properties that aren't_ returned by. g. Get-MgUser - Invalid filter clause 1 minute read On This Page. com#EXT#@fabrikam. Get the signed-in user. Type: SwitchParameter: Position: Named:. When pulling the information from graphapi using the below path, i get inconsistent results. allThe resulting ID from the Trim are known good values as I can query them independently by supplying them like Get-MGUser -UserID <ValueInUserIDPropOfHash> – Carter. Get-MgUser -All -Property…Example #1 – Microsoft Graph PowerShell using Azure Automation account runbooks with Managed identity:. With Microsoft deprecating AAD and forcing transition to Graph, I'm trying to refactor AAD scripts to using Graph module, however I am unable to get the creation time of a. Using the Microsoft. Get-LastSignInDateTime. To create the parameters described below, construct a hash table containing the appropriate properties. This is not returned by default, one needs to use the select operator. Do note that you have to request each property you plan to use, including those used for filtering. Similarly, I could invoke Get-MgGroup -Filter 'resourceProvisioningOptions/Any(x:x eq ''Team'')' -Count to get a count of the number of. To create the report including all users and their licenses, follow the below steps: 1.