operations / skill
Users and Apps Audit
Read-only Microsoft Graph report for users, licenses, app credentials, roles and guests.
At a glance
- Purpose
- Read-only Microsoft Graph report for users, licenses, app credentials, roles and guests.
- Runs in
- Local agent with shell
- Operating systems
- macOS, Linux
- Needs
- Runtime: Python 3.10+, standard library only; Needs internet: Yes; Needs accounts or API keys beyond your agent: Yes
- Files and data
- Reads files: Not stated; Writes files: Yes; Sends data to other services: Yes
- Tool type
- Skill
- Delivery
- Download from Skills Outpost
- Version
- 0.1.0
- ZIP SHA-256
- 99c89e0e3dcfbcc20ef0cd99129a712cbfda4b750a7586578298c5620d620350
- Access
- Download from Skills Outpost
- Compatibility
- Python 3.10 or newer, a command-capable Agent Skills harness, and a Microsoft 365 tenant with a Microsoft Entra ID app registration. Standard library only. Supported platforms: macOS and Linux with POSIX directory-descriptor and no-follow APIs; Windows is unsupported and fails before file or network I/O.
- External costs
- The package is free under the MIT license. Microsoft 365 licensing and any tenant costs are the user's responsibility; verify current terms with Microsoft.
- Permissions
- Reads GRAPH_TENANT_ID, GRAPH_CLIENT_ID, GRAPH_CLIENT_SECRET; optional HTTPS_PROXY, https_proxy, NO_PROXY, no_proxy and macOS system proxy settings. Creates only the approved new report relative to a verified directory descriptor at mode 0600. All output directories must exist. Tests read only the acknowledged synthetic fixture (8 MiB limit) and package hygiene files.
- Usage terms
- MIT license. Copyright 2026 Zero Width Lab. Microsoft 365, Microsoft Graph and Microsoft Entra ID (formerly Azure AD) are Microsoft trademarks. This product is independent of Microsoft. By Zero Width Lab (zerowidthlab.com)
Download from Skills Outpost
Get this version
FreeStatic source, format, secret-pattern and declaration checks with independent human source review.
- SHA-256 of the released ZIP
99c89e0e3dcfbcc20ef0cd99129a712cbfda4b750a7586578298c5620d620350
The creator shows this version's package files publicly: anyone can read SKILL.md and the other files under Files, without an account. The ZIP download needs the version in your Library (how it works).
Sign in to add this version to your library and follow its creator for free.
Sign in to get freeA creator follow is free, not a paid membership. Your email is not shared with the creator.
Files
Version 0.1.0, shown publicly by its creator, exactly as in this version's ZIP. ZIP SHA-256: 99c89e0e3dcfbcc20ef0cd99129a712cbfda4b750a7586578298c5620d620350. License: MIT (read it).
Each file has its own address. Read one as a web page at https://, or as JSON at https://; replace SKILL.md with any path below.
- manifest.json · 3.0 KiB
- LICENSE.txt · 1.0 KiB
- README.md · 3.3 KiB
- SETUP.md · 3.9 KiB
- SKILL.md · 3.5 KiB
- agents/users-and-apps-audit-agent.md · 605 B
- references/graph-report.md · 1.1 KiB
- scripts/users_and_apps_audit.py · 22.9 KiB
- source-package.json · 5.3 KiB
- tests/fixtures/synthetic.json · 76 B
- tests/test_hygiene.py · 2.3 KiB
- tests/test_users_and_apps_audit.py · 18.2 KiB
MIT
MIT LicenseCopyright (c) 2026 Zero Width Lab
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Version history
- Version 0.1.0 Current
No release notes for this version.
What it does
Users and Apps Audit is a read-only Microsoft Graph report for users, licenses, apps, roles and guests. An agent harness is software that can install the skill, run its Python command and supply environment variables. It needs Python 3.10 or newer on macOS or Linux and Microsoft Graph application permissions in a Microsoft 365 tenant. It is free under the MIT license. This listing delivers the complete package with scripts.The report counts enabled, disabled and guest users; summarizes prepaid and consumed license units and users per SKU; flags expired or soon-expiring app registration and service principal credentials; lists privileged role members; and lists guests with creation dates. Optional AuditLog.Read.All adds users whose last sign-in attempt is older than the selected window. Required section failures are marked incomplete.
Local file creation is approval-gated: --dry-run prints the full report and a digest bound to the selected/resolved path, directory and parent identities, and content, and --approve with that digest is required to create it. The CLI is read only in Microsoft Graph and uses create-only local writes. Text output escapes untrusted data onto one line. Reports contain personal data and should be handled accordingly.
Who it is for
Microsoft 365 administrators and operators who want a local, read-only inventory and expiry report through an agent harness.Example tasks
Count enabled, disabled and guest users.Find application secrets and certificates expiring within 30 days.
Review privileged directory role membership.
Compare subscribed license capacity and assigned users.
List guests and their creation dates.
Getting started
SKILL.md and the scripts can be read without an account: SKILL.md at https://