ENTRA-ID-User-Roles-and-Group-Membership-Audit

Provides a consolidated access review report for all Microsoft Entra ID users, including account status (Enabled/Disabled), assigned roles, role assignment history, group memberships, and membership counts. Supports identity governance, user access reviews, and multi-vendor environments by providing a single view of user access and permissions.

Microsoft Sentinel (KQL)