EntraMfaRegistrationReport

0.2.1

Read-only Microsoft Entra ID multifactor authentication registration reporting via Microsoft Graph. Generates CSV evidence identifying users without MFA registered, for MFA-coverage assessment findings; performs no writes to any tenant.

Minimum PowerShell version

7.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name EntraMfaRegistrationReport

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name EntraMfaRegistrationReport

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Olamide Olaleye. All rights reserved.

Package Details

Author(s)

  • Olamide Olaleye

Tags

PSGallery Entra EntraID AzureAD MFA MultifactorAuthentication MicrosoftGraph Security Reporting Audit Compliance ReadOnly

Functions

Connect-EntraMfaRegistrationReport Get-EntraMfaRegistrationReport

PSEditions

Core

Dependencies

Release Notes

## [0.2.1] - 2026-09-09

### Fixed

- `Get-EntraMfaRegistrationReport` now translates Graph's HTTP 403
 `Authentication_RequestFromUnsupportedUserRole` refusal into an actionable error naming the
 directory roles that resolve it. The scope `AuditLog.Read.All` is necessary but not
 sufficient for delegated access: the signed-in principal must also hold a permitted
 directory role, and the raw Graph message ("User is not in the allowed roles") does not say
 so, which sends operators hunting for a consent that is already granted. The new message
 names Reports Reader as the least privileged option, lists the alternatives, and points
 unattended callers at app-only authentication, which needs no role assignment. The
 condition is not retried, because a role assignment does not appear by waiting.

FileList

Version History

Version Downloads Last updated
0.2.1 (current version) 5 9/9/2026