How to get all ACTIVE Azure AD users

[guyhorn]

Hi. Active user is a user who logs-in. Do not confuse that with accountEnabled.

Azure AD reports that in the SigninLogs. 

I use this one now:

"set truncationmaxrecords=600000;SigninLogs | where Category == 'SignInLogs' | summarize count() by UserPrincipalName"

But i'm not sure it is any good. 

And the maxrecords seams only to work downwords. So I can ask for less records but not fot more. How can I increase the records number? I have 800K users to report.

[lbendlin]

Do you mean user presence? User presence in Teams - Microsoft Teams | Microsoft Learn

[guyhorn]

No. I want to get all user's last login date. Therefore I need to get them all. I now founf the query: 

$signInQuery = $signInQuery = "set notruncation;SigninLogs | summarize count() by UserPrincipalName"

But even setting notruncationretrievs only 500000 users.  And I have 750000.

[guyhorn]

PS: this works and retrieve 30 records:\

$signInQuery = "set truncationmaxrecords=30;SigninLogs | summarize count() by UserPrincipalName"

[lbendlin]

With that amount of users you likely have subdomains. You could run separate queries for each subdomain and then concatenate.

[guyhorn]

No. For two reaons. I do have an Azure AD domain with almost a million users. But above all,AAD has no sub domains.