Office 365 App Protection reports

Reports for out of compliance data, devices, apps, and users, is populated from Azure Active Directory during real-time syncs. Access the reports by logging into the Admin Portal and selecting Services > Microsoft Graph > Reports. Use the Reports tab to:

  • search, view, or download a .csv report by user
  • search, view, or download a .csv report by app
  • create and manage wipe requests
  • refresh reports

This section includes the following topics:

Before using this feature, complete the prerequisites described in the following section: Prerequisites for using Office 365 App Protection.

Related topics

Office 365 App Protection reports window

Manage reports from the Admin Portal by going to Services > Microsoft Graph to open the Office 365 App Protection window. This window includes several options, which are listed in the left pane. When you select one, the right pane changes to include details of the selected option.

  • Out of Compliance Users: This option is selected by default. Use it to manage reports on users who are out of compliance.
  • Selective Wipe: Use this option to request Azure Active Directory wipe Office 365 app data from selected devices.
  • App Protection Reports: Use this tab to view and download app protection reports by users and by apps. These reports are populated with data from Azure Active Directory during real-time syncs.
  • App Configuration Reports: Use this tab to view and download app configuration reports by users and by apps. These reports are populated with data from Azure Active Directory during real-time syncs.

Managing Out of Compliance Users reports

Use this option to manage reports on users who are out of compliance.

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports > Out of Compliance Users.
  3. Click Download Report to download a .csv report from Azure Active Directory of users who are out of compliance.
  4. Click Refresh Report to get the most recent data from Azure Active Directory after the latest sync.
  5. Select one or more of the users listed in the report or select all.
  6. Click Wipe Apps Data to send a wipe request to Azure Active Directory for users.

Managing Selective Wipe reports

Use this option to create and manage requests you send to Azure Active Directory to wipe Office 365 app data from selected devices.

Creating wipe requests

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Expand Selective Wipe.
  4. Click Create Wipe Request.
  5. Enter or search for a user name, then select one or more of the user’s devices.
  6. Click Create Wipe Request to request Azure Active Directory wipe Office 365 app data from one or more selected devices.

Managing wipe requests

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Expand Selective Wipe.
  4. Click Wipe Request.
  5. Select one or more pending wipe requests and click Cancel Wipe Request.
  6. Click Refresh to update the status of the pending wipe requests.

Downloading App Protection reports

App Protection Reports show applications protected by the policies that are created and assigned to them from the Policies tab. Use this option to download app protection .csv reports by users or apps.

Downloading App Protection reports by user

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Expand App Protection Reports.
  4. Click User.

  5. Search for, or enter a user name.

    See App Protection User reports table for details.

  6. Click Download Report.

App Protection User reports table

Select this option to view and download reports and to refresh the report data. This option provides app information for a specified user. These reports are populated with data that comes from Azure Active Directory during real-time syncs.

Table 132.   App protection user reports fields

Fields

Description

Bundle ID/Package ID

This column lists the unique identifier for the app.

Device Name

This column lists the name of the device.

Device Type

This column lists the type of device.

Policies

This column lists the app protection policies assigned to this app.

Status

This column lists the sync status of the app. The options for this column are: Synced, Synced, but out of date, and Not synced.

Last Check-In

This column lists the time stamp of the last time this app synced with Azure.

Downloading App Protection reports by app

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Click App.

  4. Complete the form.

    See App Protection App reports table for details.

  5. Click Download Report.
  6. Expand App Protection Reports.

App Protection App reports table

This option provides user data for selected apps.These reports are populated with data that comes from Azure Active Directory during real-time syncs.

Table 133.   App protection app reports

Fields

Description

Platform

Select the OS platform for which you want to see apps. The options are Android and iOS.

App

Select the single app for which you want to receive a report. This list changes depending on the platform you select.

Status

Select the user’s protection status from the list. The options are Protected and Unprotected.

User

This column lists the users that match the search criteria.

Email

This column provides the user’s email address.

Downloading App Configuration reports

App Configuration Reports show applications with configurations defined and assigned to them under the Configuration tab. Use this option to download app configuration .csv reports by users or apps.

Downloading App Configuration reports by user

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Expand App Configuration Reports.
  4. Click User.

  5. Search for, or enter a user name.

    See App Configuration User reports table for details.

  6. Click Download Report.

App Configuration User reports table

Select this option to view and download reports and to refresh the report data. This option provides app information for a specified user. These reports are populated with data that comes from Azure Active Directory during real-time syncs.

Table 134.   App configuration user reports fields

Fields

Description

Bundle ID/Package ID

This column lists the unique identifier for the app.

Device Name

This column lists the name of the device.

Device Type

This column lists the type of device.

Configurations

This column lists the app protection configurations assigned to this app.

Last Check-In

This column lists the time stamp of the last time this app synced with Azure.

Downloading App Configuration reports by app

Procedure 

  1. Log into the Admin Portal.
  2. Select Services > Microsoft Graph > Reports.
  3. Expand App Protection Reports.
  4. Click App.

  5. Complete the form.

    See App Configuration App reports table for details.

  6. Click Download Report.

App Configuration App reports table

This option provides user data for selected apps.These reports are populated with data that comes from Azure Active Directory during real-time syncs.

Table 135.   App configuration app reports

Fields

Description

Platform

Select the OS platform for which you want to see apps. The options are Android and iOS.

App

Select the single app for which you want to receive a report. This list changes depending on the platform you select.

User

This column lists the users that match the search criteria.

Email

This column provides the user’s email address.