Entra Users and Groups¶
The Entra Users/Groups tab shows the Microsoft Entra ID users, groups, service principals and licenses that MetaMiner collected for each Power BI environment, and opens profiles, effective access and blast radius analyses for them.
How it works¶
The MetaMiner Server (MMS) collects users, groups, nested group memberships, service principals and license assignments from Microsoft Graph, and links them with Power BI workspace access and activity events. The tab reads that collected data; it does not call Microsoft while you work.
The tab is shown when a Power BI environment is loaded and your MetaMiner role grants Tenant Admin in at least one loaded Power BI environment. It loads its data the first time you open it after connecting. Environments without collected Graph data are skipped; Graph collection needs the Graph permissions on the environment's app. See API Permissions.
Image of the Entra Users/Groups tab in Groups Hierarchy view with Security Groups expanded, the View Mode pane and the user filters on the left
../../images/client/entra-groups-hierarchy.png
View modes¶
Choose the view in the View Mode filter section. Each view rebuilds the tree; filters reset when you switch.
| View | Tree | Use it to |
|---|---|---|
| Groups Hierarchy | Environment > group type (Security Groups, Microsoft 365 Groups) > group > nested groups and members | Understand group structure and nesting |
| Users by Group | Environment > user > Direct Memberships and Inherited Memberships | See every group a user belongs to and how |
| Licenses | Environment > license SKU > assignment category > users | See who holds which license. See Licenses |
Switching back to a view you already opened reuses the loaded data unless the MMS has newer data. Click the refresh button on the toolbar to reload from the server.
Columns¶
| Column | Meaning |
|---|---|
| Name | User, group, service principal or license name |
| Identifier | User principal name, group ID or app ID |
| E-mail address | |
| Principal Type | User, Group, Service Principal or License |
| Account Status | Whether the account is enabled or disabled in Entra ID |
| Job Title | User's job title from Entra ID |
| User Type | Member or Guest |
| Groups | Groups the user belongs to, direct and inherited |
| Licenses | Licenses assigned to the user |
| Members | Members of the group, direct and nested |
| Nested Groups | Child groups of the group |
| Total Members | Members including nested group members |
| # Users | Unique users under the row |
| Last Activity | Date of the user's last Power BI activity |
| Days Inactive | Days since the user's last Power BI activity |
| Created On | When the group was created |
Filters¶
| Filter | Views | Effect |
|---|---|---|
| Environments | All | Which environments to show |
| hide empty groups | Groups Hierarchy | Hides groups with no members |
| Account Status | Users by Group, Licenses | All, Enabled or Disabled |
| License Count | Users by Group | Users with a number of licenses in a range |
| Group Memberships | Users by Group | Users in a number of groups in a range |
| Activity (Last 90 Days) | Licenses | See Licenses |
| License Status | Licenses | See Licenses |
Use the quick search box on the toolbar to find a name. See Filters and Search.
Actions¶
Right-click a row. The menu depends on the row type.
| Row | Actions |
|---|---|
| User, service principal | View User Profile..., View Activity Audit..., View Effective Access..., Copy Name, Copy Identifier, Copy Email, Filter to This Item, Show in Groups Hierarchy View, Show in Licenses View |
| Group | View Group Details..., Analyze Blast Radius..., Copy Name, Copy Group ID, Copy Email, Filter to This Item, Show in Groups Hierarchy View, Show in Licenses View |
| Any container | Expand All Children, Collapse All Children, Properties |
| Several rows | Copy Selected Names, Copy Selected (Tab-Delimited) |
The Show in ... View items switch the view and filter it to the same user or group. Every dialog below has Export to CSV.
User Profile¶
Basic Info (display name, user principal name, e-mail, job title, user type, account status, created and last updated dates), Group Memberships with Membership Type (Direct or Inherited), Assigned Licenses with state, and Activity Summary (Last 90 Days) with total events and last activity. A user with licenses but no activity is flagged as a Ghost User.
Activity Audit¶
User Activity Audit lists the user's Power BI activity events for the Period you choose (for example Last 90 Days): Timestamp, Operation, Artifact Name, Artifact Type, Workspace and Result (Success or Failure), with totals, the most frequent operation and the most accessed workspace.
Effective Access¶
Effective Access shows every workspace the user can access, with the Access Right, the Access Type (Direct Access or Via Group) and the Groups Providing Access.
Group Details¶
Group Details shows Basic Info (group ID, type, mail, security enabled), Direct Members, All Members (Flattened) including nested groups with their Membership Path, and License SKUs assigned through the group with the number of Users Receiving them.
Blast Radius¶
Blast Radius Analysis shows the potential impact if the group is compromised: Total Affected users (direct and Via Nested groups), Nested Groups, Accessible Workspaces with the access right, and the workspaces where the group gives Admin access. Use it before you grant a group a workspace role.
Image of the Blast Radius Analysis dialog for a group showing affected users, nested groups and accessible workspaces with Admin access highlighted
../../images/client/entra-blast-radius.png
Troubleshooting¶
The Entra Users/Groups tab is missing
Your role lacks Tenant Admin in every loaded Power BI environment. Ask your MetaMiner administrator. See Permissions Reference.
An environment is missing from the tab
MetaMiner has no Microsoft Graph data for it. Check the app's Graph permissions and the collection status. See Collection Status.
Last Activity is empty for active users
Activity events are not collected for the environment, or the user's activity is older than the collected period.