Office 365 App Protection reports
Reports for out of compliance data, devices, apps, and users, is populated from Azure Active Directory during real-time syncs. Access the reports by logging into the Admin Portal and selecting Services > Microsoft Graph > Reports. Use the Reports tab to:
- search, view, or download a .csv report by user
- search, view, or download a .csv report by app
- create and manage wipe requests
- refresh reports
This section includes the following topics:
Before using this feature, complete the prerequisites described in the following section: Prerequisites for using Office 365 App Protection.
Related topics
Office 365 App Protection reports window
Manage reports from the Admin Portal by going to Services > Microsoft Graph to open the Office 365 App Protection window. This window includes several options, which are listed in the left pane. When you select one, the right pane changes to include details of the selected option.
- Out of Compliance Users: This option is selected by default. Use it to manage reports on users who are out of compliance.
- Selective Wipe: Use this option to request Azure Active Directory wipe Office 365 app data from selected devices.
- App Protection Reports: Use this tab to view and download app protection reports by users and by apps. These reports are populated with data from Azure Active Directory during real-time syncs.
- App Configuration Reports: Use this tab to view and download app configuration reports by users and by apps. These reports are populated with data from Azure Active Directory during real-time syncs.
Managing Out of Compliance Users reports
Use this option to manage reports on users who are out of compliance.
Procedure
- Log in to the Admin Portal.
- Select Services > Microsoft Graph > Reports > Out of Compliance Users.
- Click Download Report to download a .csv report from Azure Active Directory of users who are out of compliance.
- Click Refresh Report to get the most recent data from Azure Active Directory after the latest sync.
- Select one or more of the users listed in the report or select all.
- Click Wipe Apps Data to send a wipe request to Azure Active Directory for users.
Managing Selective Wipe reports
Use this option to create and manage requests you send to Azure Active Directory to wipe Office 365 app data from selected devices.
Creating wipe requests
Procedure
- Log in to the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Expand Selective Wipe.
- Click Create Wipe Request.
- Enter or search for a user name, then select one or more of the user’s devices.
- Click Create Wipe Request to request Azure Active Directory wipe Office 365 app data from one or more selected devices.
Managing wipe requests
Procedure
- Log in to the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Expand Selective Wipe.
- Click Wipe Request.
- Select one or more pending wipe requests and click Cancel Wipe Request.
- Click Refresh to update the status of the pending wipe requests.
Downloading App Protection reports
App Protection Reports show applications protected by the policies that are created and assigned to them from the Policies tab. Use this option to download app protection .csv reports by users or apps.
Downloading App Protection reports by user
Procedure
- Log in to the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Expand App Protection Reports.
- Click User.
- Search for, or enter a user name. See App Protection User reports table for details.
- Click Download Report.
App Protection User reports table
Select this option to view and download reports and to refresh the report data. This option provides app information for a specified user. These reports are populated with data that comes from Azure Active Directory during real-time syncs.
Table: App protection user reports fields
Fields | Description |
|---|---|
Bundle ID/Package ID | This column lists the unique identifier for the app. |
Device Name | This column lists the name of the device. |
Device Type | This column lists the type of device. |
Policies | This column lists the app protection policies assigned to this app. |
Status | This column lists the sync status of the app. The options for this column are: Synced, Synced, but out of date, and Not synced. |
Last Check-In | This column lists the time stamp of the last time this app synced with Azure. |
Downloading App Protection reports by app
Procedure
- Log in to the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Click App.
- Complete the form. See App Protection App reports table for details.
- Click Download Report.
- Expand App Protection Reports.
App Protection App reports table
This option provides user data for selected apps.These reports are populated with data that comes from Azure Active Directory during real-time syncs.
Table: App protection app reports
Fields | Description |
|---|---|
Platform | Select the OS platform for which you want to see apps. The options are Android and iOS. |
App | Select the single app for which you want to receive a report. This list changes depending on the platform you select. |
Status | Select the user’s protection status from the list. The options are Protected and Unprotected. |
User | This column lists the users that match the search criteria. |
This column provides the user’s email address. |
Downloading App Configuration reports
App Configuration Reports show applications with configurations defined and assigned to them under the Configuration tab. Use this option to download app configuration .csv reports by users or apps.
Downloading App Configuration reports by user
Procedure
- Log into the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Expand App Configuration Reports.
- Click User.
- Search for, or enter a user name. See App Configuration User reports table for details.
- Click Download Report.
App Configuration User reports table
Select this option to view and download reports and to refresh the report data. This option provides app information for a specified user. These reports are populated with data that comes from Azure Active Directory during real-time syncs.
Table 150. App configuration user reports fields
Fields | Description |
|---|---|
Bundle ID/Package ID | This column lists the unique identifier for the app. |
Device Name | This column lists the name of the device. |
Device Type | This column lists the type of device. |
Configurations | This column lists the app protection configurations assigned to this app. |
Last Check-In | This column lists the time stamp of the last time this app synced with Azure. |
Downloading App Configuration reports by app
Procedure
- Log into the Admin Portal.
- Select Services > Microsoft Graph > Reports.
- Expand App Protection Reports.
- Click App.
- Complete the form. See App Configuration App reports table for details.
- Click Download Report.
App Configuration App reports table
This option provides user data for selected apps.These reports are populated with data that comes from Azure Active Directory during real-time syncs.
Table: App configuration app reports
Fields | Description |
|---|---|
Platform | Select the OS platform for which you want to see apps. The options are Android and iOS. |
App | Select the single app for which you want to receive a report. This list changes depending on the platform you select. |
User | This column lists the users that match the search criteria. |
This column provides the user’s email address. |