List Risky Users

Retrieve a list of Microsoft Entra users who are at risk.

• Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External Documentation

To learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
Filter	Filters results (rows).Example: startswith(givenName,'J')
Page Size	Sets the page size of results. The page size can be set up to a maximum of 500 results.

Example Output

{
    "value": [
        {
            "@odata.type": "#microsoft.graph.riskyUser",
            "id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
            "isDeleted": "Boolean",
            "isProcessing": "Boolean",
            "riskLastUpdatedDateTime": "String (timestamp)",
            "riskLevel": "String",
            "riskState": "String",
            "riskDetail": "String",
            "userDisplayName": "String",
            "userPrincipalName": "String"
        }
    ]
}

Workflow Library Example

List Risky Users with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop