• Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

To learn more, visit the Microsoft Entra ID documentation.

​
Parameters​

ParameterDescription
FilterFilters results (rows).Example: startswith(givenName,‘J’)
Page SizeSets the page size of results. The page size can be set up to a maximum of 500 results.

​
Example Output​

{    "value": [        {            "@odata.type": "#microsoft.graph.riskyUser",            "id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",            "isDeleted": "Boolean",            "isProcessing": "Boolean",            "riskLastUpdatedDateTime": "String (timestamp)",            "riskLevel": "String",            "riskState": "String",            "riskDetail": "String",            "userDisplayName": "String",            "userPrincipalName": "String"        }    ]}

​
Workflow Library Example​

List Risky Users with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop