In this article  :

• Issue description

• Prerequisites

• Possible causes

• Resolution

• How to reach support

• Related topics and articles

Issue description  

In ADAudit Plus, when accessing reports or audit data from the Cloud Directory (Microsoft Entra ID), users may encounter the message No data available. This issue typically arises due to misconfigured API permissions, missing admin consent, expired client secrets, or a delay in log generation at the Microsoft end.

Prerequisites  

• The Microsoft tenant must have one of the following active licenses:

• Azure AD Premium P1 or P2

• Microsoft 365 E5

• An application must be registered in Microsoft Entra ID with the following values generated and saved:

• Client ID

• Tenant ID

• Client Secret

• The following Microsoft Graph application permissions must be added to the registered application:

• AuditLog.Read.All

• Directory.Read.All

• SignIn.Read.All

• User.Read.All

• Group.Read.All

• Application.Read.All

• Policy.Read.All

• RoleManagement.Read.Directory

• IdentityRiskEvent.Read.All

• Admin consent must be granted for all the permissions above.

• Audit and sign-in logs must be available in the Microsoft Entra portal under Monitoring > Audit logs and Sign-in logs.

• ADAudit Plus must be able to access the following endpoints from the server:

• graph.microsoft.com

• login.microsoftonline.com

• manage.office.com

• If a proxy is used, it must be configured in ADAudit Plus under Admin > General Settings > Connection > Proxy Settings and validated using the Test Connection option.

Possible causes  

• Required Microsoft Graph permissions are not added or admin consent has not been granted.

• The client secret is expired or was entered incorrectly.

• Audit or sign-in logs have not yet been generated in the tenant.

• ADAudit Plus is unable to reach Graph API endpoints due to firewall or proxy restrictions.

• The tenant ID, client ID, or client secret is misconfigured in ADAudit Plus.

Resolution  

Step 1: Verify Microsoft Graph API permissions and admin consent  

1. Go to entra.microsoft.com and sign in using a Global Administrator account.

2. Navigate to Identity > Applications > Enterprise applications.

3. Locate and select the registered ADAudit Plus application.

4. Click on Permissions and ensure all required permissions are listed.

• AuditLog.Read.All

• Directory.Read.All

• SignIn.Read.All

• User.Read.All

• Group.Read.All

• Application.Read.All

• Policy.Read.All

• RoleManagement.Read.Directory

• IdentityRiskEvent.Read.All

5. If any are missing:

• Go to API permissions > Add a permission > Microsoft Graph > Application permissions.

• Add the missing permissions.

• Click Grant admin consent for <Tenant Name>.

Step 2: Reauthenticate or verify tenant configuration in ADAudit Plus  

1. Log in to ADAudit Plus.

2. Navigate to Configuration > Cloud Directory.

3. Click Edit next to the configured tenant.

4. Verify and re-enter the Tenant ID, Client ID, and Client Secret.

5. Click Validate & Save.

6. Confirm that a green tick or success message appears after validation.

Step 3: Check if logs are available in the Microsoft Entra portal  

1. Sign in to entra.microsoft.com with Global Administrator credentials.

2. Navigate to Monitoring > Audit logs and Monitoring > Sign-in logs.

3. Verify that logs are being generated for recent events. If logs are not available, ADAudit Plus will not be able to fetch any data.

Step 4: Test endpoint connectivity from the ADAudit Plus server  

1. Click the Windows icon and search for Command Prompt.

2. Right-click Command Prompt and select Run as administrator.

3. In the command prompt window, test connectivity to the required endpoints:

• ping graph.microsoft.com

• ping login.microsoftonline.com

4. Confirm that replies are received for both commands. If the pings fail, verify local and external firewall rules.

5. If a proxy is used:

• Open ADAudit Plus.

• Navigate to Admin > Connection > Proxy Settings.

• Enter the proxy server address, port, and credentials.

• Click Test Connection.

Step 5: Initiate synchronization in ADAudit Plus  

1. Log in to ADAudit Plus.

2. Navigate to Configuration > Cloud Directory.

3. Click Sync Now next to the affected tenant.

4. Wait for the sync status to change from No data available to Sync in Progress or reflect a recent Last Sync timestamp.

How to reach support  

If the issue persists, contact the support team and provide:

• A screenshot of the Cloud Directory configuration in ADAudit Plus.

• The compressed logs folder from the ADAudit Plus installation directory.

• The timestamp of the last sync attempt.

Related topics and articles  

• Azure AD audit troubleshooting

• Ports and connectivity requirements

• Microsoft 365 configuration

• Configure Azure AD using AD Premium license