Find-SmsOnlyUsers

READ-ONLY: this script changes nothing in your tenant. It only sends Microsoft Graph GET requests.

Microsoft retires its own SMS and voice delivery for Entra ID MFA. After the applicable date, users whose only
available MFA method is SMS or voice must register a passkey at sign-in before they can continue (a blocking
prompt, no opt-out). Microsoft's entra-sms-voice-usage-analyzer shows policy scope; this script lists the people.

It reads:
 1. User registration details (Graph reports/authenticationMethods/userRegistrationDetails): the methods each
    user has registered, their default method, member or guest. Needs Entra ID P1 or P2 and AuditLog.Read.All.
 2. Members of the Global Administrator role (active assignments), who get the later July 1, 2027 date.
 3. Whether the SMS and Voice call methods are enabled in the authentication methods policy.

Verdict per user:
 SMS/VOICE ONLY      only phone methods (email and security questions don't count): blocking passkey prompt
                     from the user's retirement date
 DEFAULT IS SMS      has another method but SMS or voice is the default: make the other method the default
 HAS ANOTHER METHOD  can be removed from the SMS and Voice policy after testing the other method
 NO MFA METHOD       no MFA method registered at all (not part of this retirement, but worth a look)
 Not affected        no phone method

It writes SmsOnlyUsers-<date>.csv and SmsOnlyUsers-<date>.html.