Getting started

From installation to the first retrieval

System requirements

• OS: Windows 10 version 2004 or later, Windows 11
• Network: a connection to Microsoft sign-in and Microsoft Graph
• License: Microsoft Entra ID P1 or P2
• Account: a work or school account. The Global Reader role is recommended (prerequisites).

Steps

1. Install the app from Microsoft Store.
2. Start the app and read the Terms of Use and Disclaimer. If you select Do not agree (exit), the app closes. Nothing is retrieved or stored until you agree.
3. Register an app in the Microsoft Entra admin center.
4. Select the gear icon to open Settings, select Connection settings, and enter the tenant ID and the client ID.
5. Select a time range at the top, then select Retrieve. Sign in when the Windows sign-in dialog appears.

Time range

• Select 24 hours, 7 days, 30 days, or a custom period (30 days at most).
• Select Only information since the last retrieval to retrieve only what is new since then.
• Only interactive sign-ins are retrieved.
• The log retention period depends on your license. The range actually retrieved is shown on the screen.

Buying the paid edition

CA simulation, report-only policy evaluation, change proposals, and CSV and HTML export are available in the paid edition. The paid edition is a one-time purchase add-on in Microsoft Store. Select Buy the paid edition in the app. If the purchase status cannot be confirmed, paid features are unavailable.

Last updated: 2026-11-03