User Activity Report

Track end-user activity across Microsoft 365 services. Monitor adoption, identify inactive users, and understand how your organization uses collaboration tools.

Overview

The User Activity Report aggregates user actions across Exchange, SharePoint, OneDrive, Teams, and other Microsoft 365 services. Use this data to measure adoption, identify training needs, and optimize license assignments based on actual usage.

Report Columns

Column	Description
User	Display name and user principal name
Last Activity Date	Most recent activity across any service
Exchange Activity	Email sent/received counts
SharePoint Activity	Files viewed, edited, or shared
OneDrive Activity	Files synced, viewed, or edited
Teams Activity	Messages sent, meetings attended
Yammer Activity	Posts, reads, and likes
Activity Level	Power User, Regular, Light, or Inactive

User Segments

Power Users — Highly active across multiple services daily
Regular Users — Consistent weekly activity
Light Users — Occasional monthly activity
Inactive — No activity in the last 30+ days

Activity Trends

Track user activity over time:

Daily active users — Unique users with activity each day
Weekly active users — Unique users with activity each week
Monthly active users — Unique users with activity each month
Service adoption — Which services users are actively using

License Optimization

Use activity data to optimize license assignments:

Identify users with premium licenses but minimal usage
Recommend downgrades for light users
Identify inactive users who may no longer need licenses
Track ROI of license investments through adoption metrics

Filters

Date Range — Last 7, 30, 90, 180 days or custom
Activity Level — Power User, Regular, Light, Inactive
Service — Exchange, SharePoint, OneDrive, Teams
Department — Filter by organizational department
Tenant — Filter by managed tenant

Graph API Data Sources

GET /reports/getOffice365ActiveUserDetail
GET /reports/getOffice365ActiveUserCounts

API Reference

GET /api/monitoring/audit/user-activity — Get user activity report
GET /api/monitoring/audit/user-activity/summary — Get activity summary
POST /api/monitoring/audit/user-activity/export — Export report data